INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Gunra Ransomware Exploits Fortinet Flaws to Target Networks
| 2026-08-12 13:15 CRITICAL HIGHExecutive Summary AI-generated
Gunra ransomware actors are exploiting two Fortinet vulnerabilities to target government and critical national infrastructure organizations, a joint advisory issued by US and Republic of Korea authorities has warned. The advisory notes that Gunra employs multiple stealth and defense impairment techniques to hinder detection and analysis while moving across networks using stolen credentials and authentication bypass techniques.
Victims have spanned regions throughout the world, and multiple critical sectors, including healthcare, financial services, government organizations and critical manufacturing. Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure.
Technical Mitigations AI-generated
* Implement regular security updates and patches for Fortinet devices to ensure that known vulnerabilities are addressed before they can be exploited by attackers.
* Use multi-factor authentication (MFA) with strong passwords, enable two-factor authentication whenever possible, and monitor user activity for suspicious login attempts.
* Regularly review and update network access logs, command history, and system configuration files to detect and prevent stealthy lateral movement and exfiltration of data.
* Monitor Fortinet device firmware versions and apply patches as soon as they are available to ensure that known vulnerabilities are addressed before they can be exploited by attackers.
* Use a secure authentication protocol, such as SSH with encryption, when connecting to remote systems or services to prevent unauthorized access.
Technical Observables
AI Podcast (EN) detail_available
detail_listen_ai (EN)
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Lazarus GroupLazarus GroupAndarielAndarielMoonstone SleetMoonstone Sleet
QilinQilinContiConti
CVE-2025-24472CVE-2025-24472
CVE-2024-5559CVE-2024-5559
CVE-2024-55591CVE-2024-55591
Target & Sectors
LATAM
LATAM
EUROPE
EUROPE
DPRK
DPRK
APAC
APAC
NORTH_AMERICA
NORTH_AMERICA
MIDDLE_EAST
MIDDLE_EAST
AFRICA
AFRICA
mediamedia
logisticslogistics
defensedefense
technologytechnology
healthcarehealthcare
retailretail
governmentgovernment
manufacturingmanufacturing
transportationtransportation
healthhealth
Incident Timeline
October 2024
Gunra ransomware exploited vulnerabilities in Fortinet's software to breach networks.
Click on any entity below to view its context and source!
tactic
Ransomware
As far back as October 2024, Palo Alto Networks Unit42
said
it observed the Lazarus sub-cluster Andariel partnering with the Play ransomware crew.
organisation
Palo Alto Networks Unit42
As far back as October 2024, Palo Alto Networks Unit42
said
it observed the Lazarus sub-cluster Andariel partnering with the Play ransomware crew.
threat_actor
Andariel
As far back as October 2024, Palo Alto Networks Unit42
said
it observed the Lazarus sub-cluster Andariel partnering with the Play ransomware crew.
January 2025
Gunra Ransomware exploited a previously unknown vulnerability in Fortinet's software that was publicly disclosed in January 2025.
February 2025
Threat actors exploited CVE-2025-24472 in Fortinet's Flaws to breach networks.
Click on any entity below to view its context and source!
vulnerability
CVE-2025-24472
The second,
CVE-2025-24472
, is a high-severity authentication bypass flaw impacting FortiOS and FortiProxy software that was first disclosed in February 2025.
organisation
FortiOS
The second,
CVE-2025-24472
, is a high-severity authentication bypass flaw impacting FortiOS and FortiProxy software that was first disclosed in February 2025.
organisation
CVE-2025
The second,
CVE-2025-24472
, is a high-severity authentication bypass flaw impacting FortiOS and FortiProxy software that was first disclosed in February 2025.
April 2025
Gunra ransomware exploited vulnerabilities in Fortinet's software to breach networks.
Click on any entity below to view its context and source!
target_region
United States
The advisory is authored by the FBI, the Cybersecurity and Infrastructure Security Agency (CISA) and other US government agencies alongside the Republic of Korea’s National Police Agency (KNPA),
Gunra ransomware is based on
leaked Conti ransomware
source code in 2022, and was first observed in April 2025.
industry
Government
The advisory is authored by the FBI, the Cybersecurity and Infrastructure Security Agency (CISA) and other US government agencies alongside the Republic of Korea’s National Police Agency (KNPA),
Gunra ransomware is based on
leaked Conti ransomware
source code in 2022, and was first observed in April 2025.
tactic
Ransomware
The advisory is authored by the FBI, the Cybersecurity and Infrastructure Security Agency (CISA) and other US government agencies alongside the Republic of Korea’s National Police Agency (KNPA),
Gunra ransomware is based on
leaked Conti ransomware
source code in 2022, and was first observed in April 2025.
In a cybersecurity
advisory
, U.S. law enforcement agencies and South Korea’s National Policy Agency spotlighted the ransomware operation that emerged in April 2025 and is built using source code from the Conti ransomware that was leaked in 2022.
The FBI said it first observed the ransomware and its leak site in April 2025.
Gunra first emerged in April 2025 as a sophisticated double-extortion ransomware variant derived from the leaked Conti
1
ransomware source code.
Overview
The FBI originally observed Gunra ransomware in April 2025.
attribution
FBI
The advisory is authored by the FBI, the Cybersecurity and Infrastructure Security Agency (CISA) and other US government agencies alongside the Republic of Korea’s National Police Agency (KNPA),
Gunra ransomware is based on
leaked Conti ransomware
source code in 2022, and was first observed in April 2025.
The FBI said it first observed the ransomware and its leak site in April 2025.
attribution
National Police Agency
The advisory is authored by the FBI, the Cybersecurity and Infrastructure Security Agency (CISA) and other US government agencies alongside the Republic of Korea’s National Police Agency (KNPA),
Gunra ransomware is based on
leaked Conti ransomware
source code in 2022, and was first observed in April 2025.
attribution
KNPA
The advisory is authored by the FBI, the Cybersecurity and Infrastructure Security Agency (CISA) and other US government agencies alongside the Republic of Korea’s National Police Agency (KNPA),
Gunra ransomware is based on
leaked Conti ransomware
source code in 2022, and was first observed in April 2025.
malware
Conti
The advisory is authored by the FBI, the Cybersecurity and Infrastructure Security Agency (CISA) and other US government agencies alongside the Republic of Korea’s National Police Agency (KNPA),
Gunra ransomware is based on
leaked Conti ransomware
source code in 2022, and was first observed in April 2025.
In a cybersecurity
advisory
, U.S. law enforcement agencies and South Korea’s National Policy Agency spotlighted the ransomware operation that emerged in April 2025 and is built using source code from the Conti ransomware that was leaked in 2022.
Gunra first emerged in April 2025 as a sophisticated double-extortion ransomware variant derived from the leaked Conti
1
ransomware source code.
target_region
Korea, Republic of
Live, Gunra has listed a total of 51 victims since emerging in the threat landscape in April 2025, with most of them from
South Korea
, Brazil, Spain, Thailand, and Hong Kong.
In a cybersecurity
advisory
, U.S. law enforcement agencies and South Korea’s National Policy Agency spotlighted the ransomware operation that emerged in April 2025 and is built using source code from the Conti ransomware that was leaked in 2022.
target_region
Brazil
Live, Gunra has listed a total of 51 victims since emerging in the threat landscape in April 2025, with most of them from
South Korea
, Brazil, Spain, Thailand, and Hong Kong.
target_region
Spain
Live, Gunra has listed a total of 51 victims since emerging in the threat landscape in April 2025, with most of them from
South Korea
, Brazil, Spain, Thailand, and Hong Kong.
target_region
Thailand
Live, Gunra has listed a total of 51 victims since emerging in the threat landscape in April 2025, with most of them from
South Korea
, Brazil, Spain, Thailand, and Hong Kong.
target_region
Hong Kong
Live, Gunra has listed a total of 51 victims since emerging in the threat landscape in April 2025, with most of them from
South Korea
, Brazil, Spain, Thailand, and Hong Kong.
victims
51 victims
Live, Gunra has listed a total of 51 victims since emerging in the threat landscape in April 2025, with most of them from
South Korea
, Brazil, Spain, Thailand, and Hong Kong.
attribution
National Policy Agency
In a cybersecurity
advisory
, U.S. law enforcement agencies and South Korea’s National Policy Agency spotlighted the ransomware operation that emerged in April 2025 and is built using source code from the Conti ransomware that was leaked in 2022.
tactic
Extortion
Gunra first emerged in April 2025 as a sophisticated double-extortion ransomware variant derived from the leaked Conti
1
ransomware source code.
financial
1 ransomware
Gunra first emerged in April 2025 as a sophisticated double-extortion ransomware variant derived from the leaked Conti
1
ransomware source code.
attribution
Overview
The FBI
Overview
The FBI originally observed Gunra ransomware in April 2025.
Apr. 2025
Gunra ransomware exploited vulnerabilities in Fortinet's software to breach networks.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
May 3, 2025
Gunra Ransomware exploited a time()-seeded rand() flaw in its Linux variant to breach networks.
Click on any entity below to view its context and source!
tactic
Ransomware
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
infrastructure
Linux
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
general_metric
2 lists
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
attribution
Trend Micro
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
attribution
CYFIRMA
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
June 7, 2025
Gunra ransomware exploited vulnerabilities in Fortinet's software to breach networks.
July 2025
Gunra used exploits of Fortinet vulnerabilities to breach networks.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
July 23, 2025
Gunra ransomware exploited vulnerabilities in Fortinet's products to breach networks on July 23, 2025.
July 29, 2025
Gunra Ransomware exploited a time()-seeded rand() flaw in its Linux variant to breach networks.
Click on any entity below to view its context and source!
tactic
Ransomware
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
infrastructure
Linux
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
general_metric
2 lists
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
attribution
Trend Micro
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
attribution
CYFIRMA
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
2025/08/10
The FBI discovered Gunra ransomware exploits in April 2023.
Click on any entity below to view its context and source!
attribution
FBI
The FBI first took notice of Gunra in April of last year.
attribution
Gunra
The FBI first took notice of Gunra in April of last year.
2025/08/11
SuperBlack used a vulnerability in Fortinet's software to breach networks.
Click on any entity below to view its context and source!
organisation
SuperBlack
For example, an emerging gang known as
SuperBlack exploited
the two flaws in attacks last year.
tactic
Phishing
"The group uses phishing as a main attack vector to deliver malicious pieces to their targets and carry out negotiations on a WhatsApp-themed chat Panel," security researcher Rakesh Krishnan
said
in an analysis published last year.
organisation
WhatsApp
"The group uses phishing as a main attack vector to deliver malicious pieces to their targets and carry out negotiations on a WhatsApp-themed chat Panel," security researcher Rakesh Krishnan
said
in an analysis published last year.
organisation
Panel
"The group uses phishing as a main attack vector to deliver malicious pieces to their targets and carry out negotiations on a WhatsApp-themed chat Panel," security researcher Rakesh Krishnan
said
in an analysis published last year.
the spring of 2025
US and South Korean government agencies issued a joint cybersecurity alert on Monday regarding the Gunra ransomware gang that targeted networks in the spring of 2025.
Click on any entity below to view its context and source!
target_region
United States
US and South Korean government agencies issued a joint cybersecurity alert on Monday regarding
Gunra
, a ransomware gang that first emerged in the spring of 2025.
industry
Government
US and South Korean government agencies issued a joint cybersecurity alert on Monday regarding
Gunra
, a ransomware gang that first emerged in the spring of 2025.
tactic
Ransomware
US and South Korean government agencies issued a joint cybersecurity alert on Monday regarding
Gunra
, a ransomware gang that first emerged in the spring of 2025.
target_region
Korea, Republic of
US and South Korean government agencies issued a joint cybersecurity alert on Monday regarding
Gunra
, a ransomware gang that first emerged in the spring of 2025.
early 2025
Gunra ransomware exploited vulnerabilities in Fortinet's software to breach networks.
Click on any entity below to view its context and source!
tactic
Ransomware
Indicators of Compromise
Table 2
lists IP addresses and domains associated with Gunra ransomware infrastructure since early 2025.
organisation
IP
Indicators of Compromise
Table 2
lists IP addresses and domains associated with Gunra ransomware infrastructure since early 2025.
general_metric
2 lists
Indicators of Compromise
Table 2
lists IP addresses and domains associated with Gunra ransomware infrastructure since early 2025.
mid-2025
Gunra actors exploited Fortinet flaws in Windows systems to breach networks.
Click on any entity below to view its context and source!
infrastructure
Windows
4
Initially, Gunra actors’ campaigns focused on Windows environments; reporting in mid-2025 indicated the group introduced a Linux variant and moved toward broader cross-platform targeting.
infrastructure
Linux
4
Initially, Gunra actors’ campaigns focused on Windows environments; reporting in mid-2025 indicated the group introduced a Linux variant and moved toward broader cross-platform targeting.
September 2025
Threat actors used Fortinet's known vulnerabilities in the Qilin ransomware to breach networks targeting South Korean and Middle Eastern entities.
Click on any entity below to view its context and source!
tactic
Ransomware
At least since September 2025, the Lazarus Group and its related intrusion set Moonstone Sleet (aka Storm-1789) have also been attributed to attacks targeting South Korean and Middle East entities with
Qilin
and
Medusa
ransomware.
source_region
Korea, Republic of
At least since September 2025, the Lazarus Group and its related intrusion set Moonstone Sleet (aka Storm-1789) have also been attributed to attacks targeting South Korean and Middle East entities with
Qilin
and
Medusa
ransomware.
source_region
MIDDLE_EAST
At least since September 2025, the Lazarus Group and its related intrusion set Moonstone Sleet (aka Storm-1789) have also been attributed to attacks targeting South Korean and Middle East entities with
Qilin
and
Medusa
ransomware.
threat_actor
Lazarus Group
At least since September 2025, the Lazarus Group and its related intrusion set Moonstone Sleet (aka Storm-1789) have also been attributed to attacks targeting South Korean and Middle East entities with
Qilin
and
Medusa
ransomware.
threat_actor
Moonstone Sleet
At least since September 2025, the Lazarus Group and its related intrusion set Moonstone Sleet (aka Storm-1789) have also been attributed to attacks targeting South Korean and Middle East entities with
Qilin
and
Medusa
ransomware.
malware
Qilin
At least since September 2025, the Lazarus Group and its related intrusion set Moonstone Sleet (aka Storm-1789) have also been attributed to attacks targeting South Korean and Middle East entities with
Qilin
and
Medusa
ransomware.
Nov. 6, 2025
The threat actors used a vulnerability in Fortinet's software to breach networks.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Nov. 2025
23.239.119[.]6 June 2025.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Dec. 2025
The threat actors used a vulnerability in Fortinet's software to breach networks.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
January 2026
Gunra ransomware exploited Fortinet flaws to breach networks.
Click on any entity below to view its context and source!
tactic
Ransomware
"
The Conti-derived operation is said to have
launched
a formal RaaS affiliate program on dark web forums in January 2026, providing affiliates with access to a management panel, a configurable ransomware builder, cross-platform locker payloads, and structured affiliate documentation.
As of January 2026, Gunra launched a formal RaaS affiliate program on dark web forums, providing affiliates with access to a management panel, a configurable ransomware builder, cross-platform locker payloads, and structured affiliate documentation.
malware
Conti
"
The Conti-derived operation is said to have
launched
a formal RaaS affiliate program on dark web forums in January 2026, providing affiliates with access to a management panel, a configurable ransomware builder, cross-platform locker payloads, and structured affiliate documentation.
Jan. 2026
Gunra actors used the Fortinet flaw to breach networks through IP addresses 23.239.119, 86.54.28 and domains 103.125.234, 70.36.99, 211.21.210, 123.184.143, 182.204.21, 182.204.16, 123.244.187, 182.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
general_metric
3.0 SIGNBT
Jan. 2026
Table 3
lists email addresses associated with Gunra actors.
February 11, 2026
Threat actors used CloudSEK's ransomware exploits to target Fortinet networks.
Click on any entity below to view its context and source!
organisation
CloudSEK
3
CloudSEK, “Inside Gunra RaaS: From Affiliate Recruitment on the Dark Web to Full Technical Dissection of their Locker,” CloudSEK, February 11, 2026,
.
general_metric
3.0 SIGNBT
3
CloudSEK, “Inside Gunra RaaS: From Affiliate Recruitment on the Dark Web to Full Technical Dissection of their Locker,” CloudSEK, February 11, 2026,
.
Feb. 2026
The threat actors used a vulnerability in Fortinet's software to breach networks.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
March 12, 2026
Threat actors used a time()-seeded random number generator flaw in Gunra Ransomware's Linux variant to breach networks.
Click on any entity below to view its context and source!
tactic
Ransomware
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
infrastructure
Linux
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
general_metric
2 lists
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
attribution
Trend Micro
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
attribution
CYFIRMA
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
March 2026
Threat actors used a weakness in Gunra ransomware's Linux ELF variants to breach networks.
Click on any entity below to view its context and source!
infrastructure
Windows
The group offers
both Windows and Linux variants
of its locker, although an
analysis
released by Breakglass Intelligence in March 2026 identified a "catastrophic cryptographic weakness" in the Linux builds that made it possible to recover the encryption key and regain access to the files.
infrastructure
Linux
The group offers
both Windows and Linux variants
of its locker, although an
analysis
released by Breakglass Intelligence in March 2026 identified a "catastrophic cryptographic weakness" in the Linux builds that made it possible to recover the encryption key and regain access to the files.
As of March 2026, researchers identified a weakness in the Gunra ransomware’s Linux Executable and Linkable Format (ELF) variants (appended with
.GNRA
); the encryption keys use a weak pseudorandom number generator (PRNG) seeded with the predictable system
srand(time(NULL)
).
tactic
Ransomware
As of March 2026, researchers identified a weakness in the Gunra ransomware’s Linux Executable and Linkable Format (ELF) variants (appended with
.GNRA
); the encryption keys use a weak pseudorandom number generator (PRNG) seeded with the predictable system
srand(time(NULL)
).
organisation
ELF
As of March 2026, researchers identified a weakness in the Gunra ransomware’s Linux Executable and Linkable Format (ELF) variants (appended with
.GNRA
); the encryption keys use a weak pseudorandom number generator (PRNG) seeded with the predictable system
srand(time(NULL)
).
August 10
Gunra actors used Fortinet flaws to breach networks.
Click on any entity below to view its context and source!
tactic
Lateral Movement
The
advisory
, published on August 10, also highlighted Gunra actors’ ability to establish persistence and achieve lateral movement in victim environments following initial access, largely using techniques to bypass authentication protocols.
August 10, 2026
Gunra ransomware exploited vulnerabilities in Fortinet's software to breach networks.
Click on any entity below to view its context and source!
industry
Government
Advisory at a Glance
Title
#StopRansomware: Gunra Ransomware
Original Publication
August 10, 2026
Executive Summary
Gunra is a ransomware-as-a-service (RaaS) used by affiliates to target government, critical infrastructure, and other organizations.
tactic
Ransomware
Advisory at a Glance
Title
#StopRansomware: Gunra Ransomware
Original Publication
August 10, 2026
Executive Summary
Gunra is a ransomware-as-a-service (RaaS) used by affiliates to target government, critical infrastructure, and other organizations.
attribution
Gunra
Advisory at a Glance
Title
#StopRansomware: Gunra Ransomware
Original Publication
August 10, 2026
Executive Summary
Gunra is a ransomware-as-a-service (RaaS) used by affiliates to target government, critical infrastructure, and other organizations.
attribution
Glance
Advisory at a Glance
Title
#StopRansomware: Gunra Ransomware
Original Publication
August 10, 2026
Executive Summary
Gunra is a ransomware-as-a-service (RaaS) used by affiliates to target government, critical infrastructure, and other organizations.
attribution
Gunra Ransomware
Original Publication
Advisory at a Glance
Title
#StopRansomware: Gunra Ransomware
Original Publication
August 10, 2026
Executive Summary
Gunra is a ransomware-as-a-service (RaaS) used by affiliates to target government, critical infrastructure, and other organizations.
Between June and July of 2025
Gunra actors exploited vulnerabilities in Fortinet's software to breach networks targeting datapub.news between June and July of 2025.
Click on any entity below to view its context and source!
observable
datapub.news
Between June and July of 2025, Gunra actors operated a clearnet mirror of their Tor-based DLS at domain
datapub.news
.
123.244.187[.]144
Nov. 2025
The threat actors used a vulnerability in Fortinet's software to breach the networks of Datapub[.]news and other organizations.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
123.246.37[.]108
Nov. 2025
The threat actors used a vulnerability in Fortinet's software to breach the networks of Datapub[.]news and other organizations.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Mar. 2026
July 2026
The threat actors used a vulnerability in Fortinet's software to breach networks.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
June 2025
July 2025
The threat actors used a vulnerability in Fortinet's software to breach networks.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
103.125.234[.]14
Nov. 2025
The threat actors used a vulnerability in Fortinet's software to breach the networks of Datapub[.]news and other organizations.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
211.21.210[.]181
Nov. 2025
The threat actors used a vulnerability in Fortinet's software to breach the networks of Datapub[.]news and other organizations.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
182.204.16[.]112
Nov. 2025
The threat actors used a vulnerability in Fortinet's software to breach the networks of Datapub[.]news and other organizations.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
July 2025
Nov. 6, 2025
23.239.119[.]6 June 2025.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
182.204.39[.]118
Nov. 2025
The threat actors used a vulnerability in Fortinet's software to breach the networks of Datapub[.]news and other organizations.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
91.201.66[.]146
Nov. 2025
The threat actors used a vulnerability in Fortinet's software to breach the networks of Datapub[.]news and other organizations.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
123.184.143[.]105
Nov. 2025
The threat actors used a vulnerability in Fortinet's software to breach the networks of Datapub[.]news and other organizations.
Click on any entity below to view its context and source!
infrastructure
23.239.119
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
86.54.28
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
103.125.234
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
70.36.99
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
211.21.210
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.184.143
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.21
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.16
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.244.187
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
182.204.39
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
67.43.53
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
123.246.37
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
infrastructure
91.201.66
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1590.005 - IP Addresses
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
tactic
T1584.001 - Domains
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
organisation
Datapub[.]news
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
2026/08/12
Gunra actors used the 7-Zip, WinRAR, RClone tools to copy and archive victim data for exfiltration.
Click on any entity below to view its context and source!
organisation
Gunra
Gunra is a ransomware-as-a-service (RaaS) which primarily exploits known vulnerabilities in internet-facing devices, including firewalls and VPN appliances, to gain initial access.
Gunra's ransomware is "a sophisticated double-extortion ransomware variant" based on the
leaked source code
of the now-defunct Conti gang, according to the advisory.
Attacks
deploying the ransomware
have leveraged security flaws in internet-facing Schneider Electric PowerLogic P5 (
CVE-2024-5559
) and Fortinet FortiOS and FortiProxy (
CVE-2025-24472
) appliances to obtain initial access, and then deploy the Gunra ransomware as part of a double extortion model that combines data exfiltration and data encryption for maximum impact.
By January of this year, Gunra had launched a formal ransomware-as-a-service affiliate and was growing in its ambition, Monday’s alert states.
The Gunra ransomware variant first appeared in 2025 and expanded to RaaS operations in 2026.
Two weeks ago,
researchers warned
that some tools and infrastructure used by North Korea’s Lazarus Group appear to have been shared with Gunra as it targeted South Korean organizations.
organisation
MFA
Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA.
In another example cited, the attackers enabled the continuous bypass of multi-factor authentication (MFA) by modifying authentication processing files on the corporate VDI authentication portal server.
To bypass multi-factor authentication (MFA), Gunra is said to have tampered with the authentication processing files on the corporate VDI authentication portal server such that it enabled successful authentication when a specific, Gunra-designated one-time password (OTP) value was entered.
For the same victim, the Gunra actors modified authentication processing files on the corporate VDI authentication portal server to allow successful authentication when a specific, Gunra-designated one time password (OTP) value was entered, thereby enabling the continuous bypass of multi-factor authentication (MFA)
organisation
Picus Security
In a
blog post
published Tuesday, Picus Security research engineer Umut Bayram emphasized that the ransomware gang "goes after reusable authentication material at every turn."
organisation
Umut Bayram
In a
blog post
published Tuesday, Picus Security research engineer Umut Bayram emphasized that the ransomware gang "goes after reusable authentication material at every turn."
organisation
CloudSEK
CloudSEK researchers also noted the RaaS operation attracts financially motivated but perhaps lower-skilled cybercriminals with ready-made ransomware tools.
organisation
Schneider Electric Flaws
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks.
organisation
Breach Networks
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks.
organisation
FortiProxy
Attacks
deploying the ransomware
have leveraged security flaws in internet-facing Schneider Electric PowerLogic P5 (
CVE-2024-5559
) and Fortinet FortiOS and FortiProxy (
CVE-2025-24472
) appliances to obtain initial access, and then deploy the Gunra ransomware as part of a double extortion model that combines data exfiltration and data encryption for maximum impact.
These are both authentication bypass vulnerabilities affecting specific FortiOS and FortiProxy versions:
CVE-2024-55591
is a critical flaw which allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module
CVE-2025-24472
is a high severity vulnerability which can allow a remote unauthenticated attacker with prior knowledge of upstream and downstream devices serial numbers to gain super-admin privileges on the downstream device, if the Security Fabric is enabled, via crafted CSF proxy requests
Patches are available for both flaws.
The first,
CVE-2024-55591
, is a critical authentication bypass flaw in FortiOS and FortiProxy that can allow an attacker to achieve "super admin" privileges in Fortinet appliances.
organisation
Schneider Electric PowerLogic P5
Attacks
deploying the ransomware
have leveraged security flaws in internet-facing Schneider Electric PowerLogic P5 (
CVE-2024-5559
) and Fortinet FortiOS and FortiProxy (
CVE-2025-24472
) appliances to obtain initial access, and then deploy the Gunra ransomware as part of a double extortion model that combines data exfiltration and data encryption for maximum impact.
organisation
Fortinet FortiOS
Attacks
deploying the ransomware
have leveraged security flaws in internet-facing Schneider Electric PowerLogic P5 (
CVE-2024-5559
) and Fortinet FortiOS and FortiProxy (
CVE-2025-24472
) appliances to obtain initial access, and then deploy the Gunra ransomware as part of a double extortion model that combines data exfiltration and data encryption for maximum impact.
organisation
Ransomware
According to
data
published on Ransomware.
threat_actor
Andariel
Andariel itself has a track record of deploying custom ransomware families like SHATTEREDGLASS, Maui, and H0lyGh0st in the past.
organisation
CyberScoop
Nor is Gunra alone among ransomware-as-a-service outfits
recruiting penetration testers
.
Written by Tim Starks
Tim Starks is senior reporter at CyberScoop.
organisation
StopRansomware
#StopRansomware: Gunra Ransomware.
organisation
Gunra Ransomware
#StopRansomware: Gunra Ransomware.
organisation
Cybersecurity Advisory
Introduction
Note:
This joint Cybersecurity Advisory is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors.
victims
2 sectors
2
These sectors include:
The authoring agencies encourage organizations to implement the recommendations in the
Mitigations
section of this advisory to mitigate cyber threats related to Gunra ransomware, including:
Prioritizing patching known exploited vulnerabilities
in internet-facing systems, including virtual private network (VPN) gateways and remote desktop protocol (RDP)-exposed infrastructure.
organisation
NAS
The actors then leveraged enterprise server credentials stolen from a system access control server to deploy ransomware to encrypt key assets, including database servers and network attached storage (NAS) systems [
T1486
].
infrastructure
Windows
[
T1059.003
]:
13
cmd.exe /c C:\Windows\System32\wbem\WMIC.exe shadowcopy where "ID='{guid of shadowcopy}'" delete
Additionally, against one Gunra victim, Gunra actors deleted backup and archived data stored on backup infrastructure at both the primary data center and disaster recovery center before and after the ransomware deployment
Execution
Technique Title
ID
Use
Windows Management Instrumentation
T1047
The Gunra ransomware binary contained specific WMI commands to delete volume shadow copies on victim machines.
Stealth
Technique Title
ID
Use
Debugger Evasion
T1622
The Gunra ransomware Windows encryptor binary contained the
IsDebuggerPresent
API to defend against reverse engineering and debugging activity.
7
To avoid dedicating encryption resources to non-critical files, the binary includes filtering logic to exclude common system directories (e.g.,
C:\Windows
,
C:\Program Files
,
C:\Program Files (x86)
) from the file system reconnaissance
Initially, Gunra operators focused on Windows environments before developing a Linux variant and further expanding operations this year.
The group initially focused on Windows devices but began using a Linux variant that it
created
.
Execution
Gunra’s Windows encryptor relies on native operating system (OS) application programming interfaces (APIs) to drive both execution and targeted encryption activity.
6
The Windows binary includes the
IsDebuggerPresent
API
To increase the likelihood of ransom payment and prevent system recovery [
T1490
], Gunra actors also used Windows Management Instrumentation (WMI)
WinRAR
Open source file archiver utility for Microsoft Windows.
MobaXterm
Windows application with support for multiple remote computing protocols, including SSH, X11, RDP, virtual network computing (VNC), FTP, etc.
Mimikatz
Post-exploitation tool that allows users to access and exfiltrate authentication credentials from Windows systems.
Command and Scripting Interpreter: Windows Command Shell
T1059.003
Gunra actors executed commands via
cmd.exe
on Windows to initiate the WMI command.
Remote Services: SMB/Windows Admin Shares
T1021.002
Gunra actors used SMB administrative shares with valid credentials to move laterally and deploy tools across compromised systems.
Gunra encryptors are available for Windows and Linux, increasing the potential attack surface within a victim network.
organisation
Gunra Ransomware Actors
Tools Used by Gunra Ransomware Actors
Tool Name
Description
FileZilla
Open source, cross-platform File Transfer Protocol (FTP) application that supports file transfers between devices and remote servers.
organisation
Description
FileZilla
Open
Tools Used by Gunra Ransomware Actors
Tool Name
Description
FileZilla
Open source, cross-platform File Transfer Protocol (FTP) application that supports file transfers between devices and remote servers.
organisation
FTP
Tools Used by Gunra Ransomware Actors
Tool Name
Description
FileZilla
Open source, cross-platform File Transfer Protocol (FTP) application that supports file transfers between devices and remote servers.
organisation
Ransom
Gunra Email Addresses
Email Address
Description
a00f105546345756@proton[.]me
Ransom negotiation
4569f6322bc3b22e9@proton[.]me
Ransom negotiation
ilovemycubscout@gmail[.]com
Ransom negotiation
6449a3c1e612168526@proton[.]me
Ransom negotiation
The following qTox IDs are associated with Gunra actors:
2507312EC10BB44ED9DAA04E3C5C27E8C13154649B1A02E73ACFAE1681EE0208D05133A8FB22
0FE87CED0C611AE97E049C64288557F49E8271E91399E849328B078DA789A573031783235BEF
47829AF1C943D4C296C910706923AS199BDA4995B076ED9A9016F7DEF161D445DF00F13E6900
9500B1A73716BCF40745086F7184A33EA0141B7D3F852431C8FDD2E1E8FAF9277E9FDC117B47
Table 4
lists malicious files associated with Gunra ransomware.
organisation
Technique Title
ID
Use
Stealth
Technique Title
ID
Use
Debugger Evasion
T1622
The Gunra ransomware Windows encryptor binary contained the
IsDebuggerPresent
API to defend against reverse engineering and debugging activity.
organisation
Use
Discovery
Technique Title
ID
Use
File and Directory Discovery
T1083
The Gunra ransomware binary contains custom instructions to enumerate the complete directory structure of victim machines to identify user-data files and directories for encryption.
financial
1 ransomware
Regardless of whether you or your organization have decided to pay the ransom, the FBI and CISA urge you to promptly report ransomware incidents to the FBI’s
Internet Crime Complaint Center (IC3)
or a
local FBI field office
, to USSS via a
local USSS Field Office
, or CISA via the agency’s
Incident Reporting System
or its 24/7 Operations Center (
[email protected]
), or by calling 1-844-Say-CISA (1-844-729-2472).
infrastructure
Linux
4
CYFIRMA, “
Gunra Ransomware – A Brief Analysis
”; and Breakglass Intelligence, “
Gunra Ransomware’s Linux Variant Has a Fatal Flaw
.”
5
Bonaobra, “
Gunra Ransomware Group Unveils Efficient Linux Variant
”; and CloudSEK, “
Inside Gunra RaaS
.”
6
CloudSEK, “
Inside Gunra RaaS
.”
7
CYFIRMA, “
Gunra Ransomware – A Brief Analysis
.”
8
CloudSEK, “
Inside Gunra RaaS
.”
9
CloudSEK, “
Inside Gunra RaaS
.”
10
Bonaobra, “
Gunra Ransomware Group Unveils Efficient Linux Variant
.”
11
VirusTotal, “VirusTotal - File - 91f8fc7a3290611e28a35a403fd815554d9d856006cc2ee91ccdb64057ae53b0,”
VirusTotal
,
.
12
CloudSEK, “
Inside Gunra RaaS
.”
13
CYFIRMA, “
Gunra Ransomware – A Brief Analysis
.”
14
Breakglass Intelligence, “
Gunra Ransomware’s Linux Variant Has a Fatal Flaw
.”
Initially, Gunra operators focused on Windows environments before developing a Linux variant and further expanding operations this year.
The group initially focused on Windows devices but began using a Linux variant that it
created
.
Gunra encryptors are available for Windows and Linux, increasing the potential attack surface within a victim network.
The advisory noted that as of March, researchers
found
a weakness in Gunra’s Linux variant that allows defenders to “reconstruct the keys using file timestamps and recover files without paying the ransom.”
If the incident involves a Gunra Linux variant,
preserve encrypted files, file timestamps, ransom notes, and relevant system logs
.
infrastructure
7 Zip
The FBI observed several common open source tools on Gunra infrastructure that Gunra actors use to facilitate collection and exfiltration of data, including 7-Zip, RClone, and FileZilla
Archive Collected Data
T1560
Gunra actors were observed utilizing tools such as 7-Zip, WinRAR, RClone, and others to copy and archive victim data for exfiltration.
7-Zip
Open source, cross-platform file archiver utility.
organisation
Defense Impairment
[
T1003
].
Stealth, Defense Impairment, and Discovery
Gunra employs multiple stealth and defense impairment techniques to hinder detection and analysis.
threat_actor
Lazarus Group
Two weeks ago,
researchers warned
that some tools and infrastructure used by North Korea’s Lazarus Group appear to have been shared with Gunra as it targeted South Korean organizations.
Research published in July by a South Korean cybersecurity firm took note of Gunra overlap with Lazarus Group, although it doesn’t explicitly mention the latter group’s name.
Some of the payloads distributed as part of the whole campaign include Struggle (aka SIGNBT 3.0) and Brandoor (aka COPPERHEDGE), both of which are
known to be used
by the Lazarus Group.
organisation
Microsoft 365
Once in a network, affiliates conduct highly advanced persistence and lateral movement techniques, ultimately allowing for the stealthy exfiltration of large volumes of data from Microsoft 365 services.
organisation
SMB
Attack chains are known to leverage Impacket libraries "psexec.py" and "smbclient.py" for lateral movement using the Server Message Block (SMB) protocol.
Persistence, Privilege Escalation, Lateral Movement, and Command and Control
Gunra actors regularly exploit Impacket libraries
psexec.py
and
smbclient.py
to move laterally across victim networks using the Server Message Block (SMB) protocol [
T1021.002
].
organisation
Lateral Movement
Persistence, Privilege Escalation, Lateral Movement, and Command and Control
Gunra actors regularly exploit Impacket libraries
psexec.py
and
smbclient.py
to move laterally across victim networks using the Server Message Block (SMB) protocol [
T1021.002
].
organisation
Persistence, Privilege Escalation
Persistence, Privilege Escalation, Lateral Movement, and Command and Control
Gunra actors regularly exploit Impacket libraries
psexec.py
and
smbclient.py
to move laterally across victim networks using the Server Message Block (SMB) protocol [
T1021.002
].
organisation
Command
Persistence, Privilege Escalation, Lateral Movement, and Command and Control
Gunra actors regularly exploit Impacket libraries
psexec.py
and
smbclient.py
to move laterally across victim networks using the Server Message Block (SMB) protocol [
T1021.002
].
organisation
Control
Gunra
Persistence, Privilege Escalation, Lateral Movement, and Command and Control
Gunra actors regularly exploit Impacket libraries
psexec.py
and
smbclient.py
to move laterally across victim networks using the Server Message Block (SMB) protocol [
T1021.002
].
organisation
VDI
Using stolen session information, Gunra actors gained initial access to the internal virtual desktop infrastructure (VDI) environment and conducted lateral movement via RDP [
T1021.001
].
In another example cited, the attackers enabled the continuous bypass of multi-factor authentication (MFA) by modifying authentication processing files on the corporate VDI authentication portal server.
The attackers used the stolen cookies for session hijacking and also leveraged the VDI access to beat the target organization's multifactor authentication protection.
Besides collecting business-critical documents, the group is said to have connected to the virtual desktop infrastructure (VDI) environments of IT personnel and harvested sensitive documents containing system and network configuration information.
organisation
the internal virtual desktop infrastructure (
Using stolen session information, Gunra actors gained initial access to the internal virtual desktop infrastructure (VDI) environment and conducted lateral movement via RDP [
T1021.001
].
organisation
Lateral Movement
Technique Title
ID
Use
Lateral Movement
Technique Title
ID
Use
Remote Services: Remote Desktop Protocol
T1021.001
Gunra actors used stolen VDI session information to access a victim’s internal VDI environment, then moved laterally via RDP to access the victim’s VDI authentication web server, internal AD server, and IT staff virtual desktops.
organisation
Microsoft OneDrive
Data exfiltration from Microsoft OneDrive and SharePoint is accomplished by means of an executable named "main.exe."
organisation
SharePoint
Data exfiltration from Microsoft OneDrive and SharePoint is accomplished by means of an executable named "main.exe."
This preview typically includes a directory listing of a victim’s exposed OneDrive and SharePoint files, but not the content of the files.
organisation
9
Collection and Exfiltration
Prior
9
Collection and Exfiltration
Prior to data encryption, Gunra actors collect sensitive victim data as part of their double-extortion strategy.
infrastructure
Winrar
organisation
RClone
Archive Collected Data
T1560
Gunra actors were observed utilizing tools such as 7-Zip, WinRAR, RClone, and others to copy and archive victim data for exfiltration.
organisation
Microsoft
Data from Cloud Storage
T1530
Gunra actors launched a malicious application (
main.exe
) that specifically targeted Microsoft Cloud Services (OneDrive and SharePoint) for data exfiltration.
organisation
Tor
The double-extortion group established a data leak site on Tor to list victims and publish purloined data.
In at least one case, the actors successfully exfiltrated up to tens of terabytes of data by generating compressed archives with sensitive data and exfiltrating the archives to the file-sharing service Mega.
Gunra Ransom Demands in the 10s of Millions
The group’s ransom notes generally start negotiations by demanding tens of millions of dollars, which the report described as “arbitrarily high.”
Victims are typically given five to seven days to begin negotiations via a Tor-based negotiation portal.
Gunra actors demand ransom via a customized, Tor-based negotiation portal and threaten to publish exfiltrated data on a dedicated leak site (DLS) if victims do not comply.
organisation
DLS
The actors leverage a double-extortion model, both encrypting data and threatening to publish exfiltrated data to a dedicated leak site (DLS) if the ransom is not paid.
organisation
FortiOS
These are both authentication bypass vulnerabilities affecting specific FortiOS and FortiProxy versions:
CVE-2024-55591
is a critical flaw which allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module
CVE-2025-24472
is a high severity vulnerability which can allow a remote unauthenticated attacker with prior knowledge of upstream and downstream devices serial numbers to gain super-admin privileges on the downstream device, if the Security Fabric is enabled, via crafted CSF proxy requests
Patches are available for both flaws.
organisation
CSF
These are both authentication bypass vulnerabilities affecting specific FortiOS and FortiProxy versions:
CVE-2024-55591
is a critical flaw which allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module
CVE-2025-24472
is a high severity vulnerability which can allow a remote unauthenticated attacker with prior knowledge of upstream and downstream devices serial numbers to gain super-admin privileges on the downstream device, if the Security Fabric is enabled, via crafted CSF proxy requests
Patches are available for both flaws.
organisation
Fortinet
The first,
CVE-2024-55591
, is a critical authentication bypass flaw in FortiOS and FortiProxy that can allow an attacker to achieve "super admin" privileges in Fortinet appliances.
organisation
CVE-2024-55591
Malicious Fortinet User Accounts
Username
Details
forticloud-sync
CVE-2024-55591
and
CVE-2025-24472
allow threat actors to exploit scheduled tasks on vulnerable FortiOS firewall devices to create a new, malicious persistent user forticloud-sync with super user privileges and a hard-coded password.
organisation
SSH
They subsequently established connections between the compromised systems and an external attacker-controlled server by downloading the SSH tunnelling tool OpenSSH.
Accessing a Hiware system access control server via SSH from a compromised virtual desktop and stealing a symmetric encryption key stored on the server so as to decrypt passwords for enterprise server accounts stored within the database and perform credential dumping of credentials associated with all enterprise servers.
The actors subsequently downloaded OpenSSH (an SSH tunneling tool)
organisation
OTP
To bypass multi-factor authentication (MFA), Gunra is said to have tampered with the authentication processing files on the corporate VDI authentication portal server such that it enabled successful authentication when a specific, Gunra-designated one-time password (OTP) value was entered.
For the same victim, the Gunra actors modified authentication processing files on the corporate VDI authentication portal server to allow successful authentication when a specific, Gunra-designated one time password (OTP) value was entered, thereby enabling the continuous bypass of multi-factor authentication (MFA)
Meta's AI Escapes Testing Lab in Hacking Joyride
"For the same victim, the Gunra actors modified authentication processing files on the corporate VDI authentication portal server to allow successful authentication when a specific, Gunra-designated one time password (OTP) value was entered, thereby enabling the continuous bypass of multi-factor authentication (MFA)," the advisory stated.
organisation
iCOUNTER
Roman Sannikov, global research coordinator at iCOUNTER, said that security teams should take particular note of Gunra’s “out of hours” activities.
organisation
Golden Community
“If your detection coverage drops off overnight, that's exactly the gap this group, now also operating under the alias Golden Community, is built to exploit,” he said.
organisation
Defending Against the Gunra Threat
Defending Against the Gunra Threat
The advisory urged organizations to focus on three key areas to counter the tactics employed by Gunra.
organisation
Gunra’s Windows
Execution
Gunra’s Windows encryptor relies on native operating system (OS) application programming interfaces (APIs) to drive both execution and targeted encryption activity.
organisation
WMI
To increase the likelihood of ransom payment and prevent system recovery [
T1490
], Gunra actors also used Windows Management Instrumentation (WMI)
organisation
Microsoft Windows
WinRAR
Open source file archiver utility for Microsoft Windows.
organisation
MobaXterm
MobaXterm
Windows application with support for multiple remote computing protocols, including SSH, X11, RDP, virtual network computing (VNC), FTP, etc.
organisation
RDP
MobaXterm
Windows application with support for multiple remote computing protocols, including SSH, X11, RDP, virtual network computing (VNC), FTP, etc.
organisation
VNC
MobaXterm
Windows application with support for multiple remote computing protocols, including SSH, X11, RDP, virtual network computing (VNC), FTP, etc.
organisation
Mimikatz
Post-exploitation
Mimikatz
Post-exploitation tool that allows users to access and exfiltrate authentication credentials from Windows systems.
organisation
Meta
Meta's AI Escapes Testing Lab in Hacking Joyride
"For the same victim, the Gunra actors modified authentication processing files on the corporate VDI authentication portal server to allow successful authentication when a specific, Gunra-designated one time password (OTP) value was entered, thereby enabling the continuous bypass of multi-factor authentication (MFA)," the advisory stated.
organisation
OneDrive
This preview typically includes a directory listing of a victim’s exposed OneDrive and SharePoint files, but not the content of the files.
organisation
SIGNBT
Some of the payloads distributed as part of the whole campaign include Struggle (aka SIGNBT 3.0) and Brandoor (aka COPPERHEDGE), both of which are
known to be used
by the Lazarus Group.
organisation
the NT Directory Services
Another Impacket utility, "secretsdump.py," is used to conduct credential dumping against compromised domain controllers and extract password hashes of user accounts from the NT Directory Services (NTDS) file.
organisation
SSL
Some of the other detected behaviors are listed below -
Gaining access to an administrator account for an SSL-VPN appliance by exploiting default credentials and then downloading OpenSSH from an attacker-controlled server to set up connections between compromised systems and maintain persistence within the victim environment.
[
T1105
] from an external attacker-controlled server to establish connections between compromised systems and maintain persistence in the victim’s environment [
T1572
].
After gaining access to an internet-connected workstation used by a network administrator, Gunra actors accessed the SSL-VPN administrative web console and identified an unused account that had access to both the internet-facing and internal corporate networks.
data_breach
9 TB
"The group is capable of encrypting huge files (9TB) in a limited timeframe by using advanced stream cipher encryption such as Salsa20 or ChaCha20.
financial
$10 dollars
In most cases, victims were given exorbitant ransom demands that were over $10 million dollars and told they had five to seven days to pay.
organisation
The Washington Post
His previous stops include working at The Washington Post, POLITICO and Congressional Quarterly.
organisation
POLITICO
His previous stops include working at The Washington Post, POLITICO and Congressional Quarterly.
organisation
KPNA
KPNA observed that against one victim, Gunra actors gained access to an administrator account for a secure socket layer (SSL)-VPN appliance [
T1133
] by exploiting default credentials when account lockout controls were not present [
T1078.001
]
infrastructure
19.1
Download the PDF version of this report:
For a downloadable copy of IOCs, see:
Technical Details
Note:
This advisory uses the
MITRE ATT&CK
®
Matrix for Enterprise
framework, version 19.1.
organisation
PDF
Download the PDF version of this report:
For a downloadable copy of IOCs, see:
Technical Details
Note:
This advisory uses the
MITRE ATT&CK
®
Matrix for Enterprise
framework, version 19.1.
infrastructure
Fortigate
Initial Access
Technique Title
ID
Use
Exploit Public-Facing Application
T1190
Gunra actors exploited vulnerabilities in FortiGate firewall and SSL-VPN appliances to gain initial access to victim networks.
organisation
Initial Access
Technique Title
ID
Use
Initial Access
Technique Title
ID
Use
Exploit Public-Facing Application
T1190
Gunra actors exploited vulnerabilities in FortiGate firewall and SSL-VPN appliances to gain initial access to victim networks.
organisation
FortiGate
Initial Access
Technique Title
ID
Use
Exploit Public-Facing Application
T1190
Gunra actors exploited vulnerabilities in FortiGate firewall and SSL-VPN appliances to gain initial access to victim networks.
organisation
Control
Technique Title
ID
Use
Command and Control
Technique Title
ID
Use
Ingress Tool Transfer
T1105
organisation
Sliver
Penetration
Sliver
Penetration testing toolset that allows remote command and control of systems.
infrastructure
Visual Studio Code
Microsoft Visual Studio Code
Open source extendable source code editor.
organisation
Microsoft Visual Studio Code
Microsoft Visual Studio Code
Open source extendable source code editor.
organisation
Key Actions
Key Actions
Prioritize patching known exploited vulnerabilities in internet-facing systems
, including virtual private network (VPN) gateways and remote desktop protocol (RDP)-exposed infrastructure.
organisation
the
MITRE ATT&CK Tactics and Techniques
See the
MITRE ATT&CK Tactics and Techniques
section of this advisory for a table of the threat actors’ activity mapped to MITRE ATT&CK tactics and techniques.
organisation
qTox
Subsequently, victims receive instructions to contact the Gunra actors via qTox (an encrypted messaging application) to negotiate ransom payments within five to seven days.
organisation
the internal Active Directory
The actors pivoted to multiple critical systems, including the VDI authentication web server, the internal Active Directory (AD) server, and virtual desktops assigned to IT personnel.
organisation
KNPA
In addition to collecting business-critical documents, the KNPA identified a victim case in which Gunra actors connected to the VDI environments of IT personnel and collected sensitive documents containing system and network configuration information
organisation
SQL
DBeaver
Open source database management tool for managing Structured Query Language (SQL) databases like MySQL, MariaDB, PostgreSQL, SQLite, etc.
Slack
Cloud-based team communication and collaboration platform.
organisation
SQLite
DBeaver
Open source database management tool for managing Structured Query Language (SQL) databases like MySQL, MariaDB, PostgreSQL, SQLite, etc.
Slack
Cloud-based team communication and collaboration platform.
organisation
RMM
AnyDesk
Common, legitimate remote monitoring and management (RMM) tool that can be used by a cyber actor to obtain remote access and maintain persistence.
organisation
AnyDesk
AnyDesk also supports remote file transfer.
organisation
Google Remote Desktop
Google Remote Desktop
Web-based remote desktop software tool developed by Google that runs on a proprietary Google protocol.
organisation
Google
Google Remote Desktop
Web-based remote desktop software tool developed by Google that runs on a proprietary Google protocol.
organisation
PII
Collection
Technique Title
ID
Use
Collection
TA0009
Gunra actors were observed collecting business-critical documents, databases, PII, and internal email communications.
organisation
Responders
Responders should consider:
organisation
Identify
Identify and secure legitimate, privileged accounts.
organisation
Playbook-NG
Use Playbook-NG and COUN7ER together to assemble a systematic eviction plan, or playbook, that leverages distinct countermeasures to contain and evict cyber threat actors.
organisation
Mitigations
Harden the network to prevent additional malicious activity
(see
Mitigations
for guidance).
organisation
CPG
Prioritize patching known exploited vulnerabilities
[
CPG 2.B
]
and the CVEs in this advisory
in internet-facing systems—including VPN gateways and RDP-exposed infrastructure—and keep all OSs, software, and firmware up to date to support this.
organisation
Repeat
Repeat the process for all security technologies to obtain a set of comprehensive performance data.
early 2026
Gunra used a ransomware exploit to breach Fortinet networks.
Click on any entity below to view its context and source!
tactic
Ransomware
As of early 2026, Gunra expanded its operations through a structured ransomware-as-a-service (RaaS) affiliate program advertised on dark web forums to financially motivated cybercriminals.
the first half of 2026
Threat actors used exploits in unidentified financial security software to breach networks targeting Korea.
Click on any entity below to view its context and source!
source_region
Korea, Republic of
The disclosure assumes significance in the face of a
recent advisory
from South Korea about a cyber campaign orchestrated by an unspecified state-sponsored threat group from 2025 through the first half of 2026 by exploiting vulnerabilities in an unidentified financial security software to distribute malware after tricking victims into visiting malicious URLs through spear-phishing and
watering hole techniques
.
tactic
Phishing
The disclosure assumes significance in the face of a
recent advisory
from South Korea about a cyber campaign orchestrated by an unspecified state-sponsored threat group from 2025 through the first half of 2026 by exploiting vulnerabilities in an unidentified financial security software to distribute malware after tricking victims into visiting malicious URLs through spear-phishing and
watering hole techniques
.
the second quarter of 2026
Gunra ransomware exploited Fortinet flaws.
Click on any entity below to view its context and source!
tactic
Ransomware
The cybersecurity firm Dragos
said
it identified 1,140 ransomware incidents affecting industrial organizations worldwide in the second quarter of 2026, a 12% increase compared to Q1.
financial
1,140 ransomware incidents
The cybersecurity firm Dragos
said
it identified 1,140 ransomware incidents affecting industrial organizations worldwide in the second quarter of 2026, a 12% increase compared to Q1.
general_metric
12 %
The cybersecurity firm Dragos
said
it identified 1,140 ransomware incidents affecting industrial organizations worldwide in the second quarter of 2026, a 12% increase compared to Q1.
Tactical Metrics
Metrics
infrastructure
Microsoft 365
Affected Product
Click for context!
Once in a network, affiliates conduct highly advanced persistence and lateral movement techniques, ultimately allowing for the stealthy exfiltration of large volumes of data from Microsoft 365 services.
Metrics
infrastructure
Windows
Affected Product
Initially, Gunra operators focused on Windows environments before developing a Linux variant and further expanding operations this year.
The group offers
both Windows and Linux variants
of its locker, although an
analysis
released by Breakglass Intelligence in March 2026 identified a "catastrophic cryptographic weakness" in the Linux builds that made it possible to recover the encryption key and regain access to the files.
The group initially focused on Windows devices but began using a Linux variant that it
created
.
7
To avoid dedicating encryption resources to non-critical files, the binary includes filtering logic to exclude common system directories (e.g.,
C:\Windows
,
C:\Program Files
,
C:\Program Files (x86)
) from the file system reconnaissance
[
T1059.003
]:
13
cmd.exe /c C:\Windows\System32\wbem\WMIC.exe shadowcopy where "ID='{guid of shadowcopy}'" delete
Additionally, against one Gunra victim, Gunra actors deleted backup and archived data stored on backup infrastructure at both the primary data center and disaster recovery center before and after the ransomware deployment
Execution
Technique Title
ID
Use
Windows Management Instrumentation
T1047
The Gunra ransomware binary contained specific WMI commands to delete volume shadow copies on victim machines.
Stealth
Technique Title
ID
Use
Debugger Evasion
T1622
The Gunra ransomware Windows encryptor binary contained the
IsDebuggerPresent
API to defend against reverse engineering and debugging activity.
4
Initially, Gunra actors’ campaigns focused on Windows environments; reporting in mid-2025 indicated the group introduced a Linux variant and moved toward broader cross-platform targeting.
Execution
Gunra’s Windows encryptor relies on native operating system (OS) application programming interfaces (APIs) to drive both execution and targeted encryption activity.
6
The Windows binary includes the
IsDebuggerPresent
API
To increase the likelihood of ransom payment and prevent system recovery [
T1490
], Gunra actors also used Windows Management Instrumentation (WMI)
WinRAR
Open source file archiver utility for Microsoft Windows.
MobaXterm
Windows application with support for multiple remote computing protocols, including SSH, X11, RDP, virtual network computing (VNC), FTP, etc.
Mimikatz
Post-exploitation tool that allows users to access and exfiltrate authentication credentials from Windows systems.
Command and Scripting Interpreter: Windows Command Shell
T1059.003
Gunra actors executed commands via
cmd.exe
on Windows to initiate the WMI command.
Remote Services: SMB/Windows Admin Shares
T1021.002
Gunra actors used SMB administrative shares with valid credentials to move laterally and deploy tools across compromised systems.
Gunra encryptors are available for Windows and Linux, increasing the potential attack surface within a victim network.
Metrics
infrastructure
Linux
Affected Product
Initially, Gunra operators focused on Windows environments before developing a Linux variant and further expanding operations this year.
The group offers
both Windows and Linux variants
of its locker, although an
analysis
released by Breakglass Intelligence in March 2026 identified a "catastrophic cryptographic weakness" in the Linux builds that made it possible to recover the encryption key and regain access to the files.
The group initially focused on Windows devices but began using a Linux variant that it
created
.
The advisory noted that as of March, researchers
found
a weakness in Gunra’s Linux variant that allows defenders to “reconstruct the keys using file timestamps and recover files without paying the ransom.”
As of March 2026, researchers identified a weakness in the Gunra ransomware’s Linux Executable and Linkable Format (ELF) variants (appended with
.GNRA
); the encryption keys use a weak pseudorandom number generator (PRNG) seeded with the predictable system
srand(time(NULL)
).
2
Breakglass Intelligence, “Gunra Ransomware’s Linux Variant Has a Fatal Flaw: time()-Seeded rand() Makes Encrypted Files Recoverable Without Paying,” Breakglass Intelligence, March 12, 2026,
; Jeffrey Francis Bonaobra, Melvin Singwa, Emmanuel Panopio “Gunra Ransomware Group Unveils Efficient Linux Variant,” Trend Micro, July 29, 2025,
; and CYFIRMA, “Gunra Ransomware – A Brief Analysis,” CYFIRMA, May 3, 2025,
.
4
CYFIRMA, “
Gunra Ransomware – A Brief Analysis
”; and Breakglass Intelligence, “
Gunra Ransomware’s Linux Variant Has a Fatal Flaw
.”
5
Bonaobra, “
Gunra Ransomware Group Unveils Efficient Linux Variant
”; and CloudSEK, “
Inside Gunra RaaS
.”
6
CloudSEK, “
Inside Gunra RaaS
.”
7
CYFIRMA, “
Gunra Ransomware – A Brief Analysis
.”
8
CloudSEK, “
Inside Gunra RaaS
.”
9
CloudSEK, “
Inside Gunra RaaS
.”
10
Bonaobra, “
Gunra Ransomware Group Unveils Efficient Linux Variant
.”
11
VirusTotal, “VirusTotal - File - 91f8fc7a3290611e28a35a403fd815554d9d856006cc2ee91ccdb64057ae53b0,”
VirusTotal
,
.
12
CloudSEK, “
Inside Gunra RaaS
.”
13
CYFIRMA, “
Gunra Ransomware – A Brief Analysis
.”
14
Breakglass Intelligence, “
Gunra Ransomware’s Linux Variant Has a Fatal Flaw
.”
4
Initially, Gunra actors’ campaigns focused on Windows environments; reporting in mid-2025 indicated the group introduced a Linux variant and moved toward broader cross-platform targeting.
Gunra encryptors are available for Windows and Linux, increasing the potential attack surface within a victim network.
If the incident involves a Gunra Linux variant,
preserve encrypted files, file timestamps, ransom notes, and relevant system logs
.
Metrics
victims
51
Victims
Live, Gunra has listed a total of 51 victims since emerging in the threat landscape in April 2025, with most of them from
South Korea
, Brazil, Spain, Thailand, and Hong Kong.
Metrics
data_breach
9
Tb
"The group is capable of encrypting huge files (9TB) in a limited timeframe by using advanced stream cipher encryption such as Salsa20 or ChaCha20.
Metrics
financial
1,140
Ransomware Incidents
The cybersecurity firm Dragos
said
it identified 1,140 ransomware incidents affecting industrial organizations worldwide in the second quarter of 2026, a 12% increase compared to Q1.
Metrics
financial
10,000,000
Dollars
In most cases, victims were given exorbitant ransom demands that were over $10 million dollars and told they had five to seven days to pay.
Metrics
financial
1
Ransomware
Gunra first emerged in April 2025 as a sophisticated double-extortion ransomware variant derived from the leaked Conti
1
ransomware source code.
Regardless of whether you or your organization have decided to pay the ransom, the FBI and CISA urge you to promptly report ransomware incidents to the FBI’s
Internet Crime Complaint Center (IC3)
or a
local FBI field office
, to USSS via a
local USSS Field Office
, or CISA via the agency’s
Incident Reporting System
or its 24/7 Operations Center (
[email protected]
), or by calling 1-844-Say-CISA (1-844-729-2472).
Metrics
victims
2
Sectors
2
These sectors include:
The authoring agencies encourage organizations to implement the recommendations in the
Mitigations
section of this advisory to mitigate cyber threats related to Gunra ransomware, including:
Prioritizing patching known exploited vulnerabilities
in internet-facing systems, including virtual private network (VPN) gateways and remote desktop protocol (RDP)-exposed infrastructure.
Metrics
infrastructure
7
Zip
The FBI observed several common open source tools on Gunra infrastructure that Gunra actors use to facilitate collection and exfiltration of data, including 7-Zip, RClone, and FileZilla
Archive Collected Data
T1560
Gunra actors were observed utilizing tools such as 7-Zip, WinRAR, RClone, and others to copy and archive victim data for exfiltration.
7-Zip
Open source, cross-platform file archiver utility.
Metrics
Metrics
infrastructure
19.1
Software Version
Download the PDF version of this report:
For a downloadable copy of IOCs, see:
Technical Details
Note:
This advisory uses the
MITRE ATT&CK
®
Matrix for Enterprise
framework, version 19.1.
Metrics
infrastructure
Visual Studio Code
Affected Product
Microsoft Visual Studio Code
Open source extendable source code editor.
Metrics
infrastructure
23.239.119
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
86.54.28
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
103.125.234
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
70.36.99
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
211.21.210
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
123.184.143
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
182.204.21
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
182.204.16
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
123.244.187
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
182.204.39
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
67.43.53
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
123.246.37
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
91.201.66
Software Version
IP Addresses/Domains
IP Address/Domain
First Seen
Last Seen
23.239.119[.]2
July 2025
Nov. 6, 2025
23.239.119[.]3
July 2025
Nov. 6, 2025
23.239.119[.]4
July 2025
Nov. 6, 2025
23.239.119[.]5
July 2025
Nov. 6, 2025
23.239.119[.]6
July 2025
Nov. 6, 2025
86.54.28[.]216
June 7, 2025
July 23, 2025
103.125.234[.]14
Nov. 2025
Dec. 2025
70.36.99[.]82
Nov. 2025
Dec. 2025
211.21.210[.]181
Nov. 2025
Dec. 2025
123.184.143[.]105
Nov. 2025
Dec. 2025
182.204.21[.]240
Nov. 2025
Dec. 2025
182.204.16[.]112
Nov. 2025
Dec. 2025
123.244.187[.]144
Nov. 2025
Dec. 2025
182.204.39[.]118
Nov. 2025
Dec. 2025
67.43.53[.]10
Nov. 2025
Dec. 2025
123.246.37[.]108
Nov. 2025
Dec. 2025
91.201.66[.]146
Nov. 2025
Dec. 2025
Datapub[.]news
June 2025
July 2025
gunrabxbig445sjqa535uaymzerj6fp4nwc6ngc2xughf2pedjdhk4ad[.]onion
Apr. 2025
Feb. 2026
lgiil72vkmdtbc3qv4tyq6wedyjxqr2qd4ze7xl2cxgerdnymxj7soqd[.]onion
Mar. 2026
July 2026
nsnhzysbntsqdwpys6mhml33muccsvterxewh5rkbmcab7bg2ttevjqd[.]onion
Jan. 2026
Metrics
infrastructure
Fortigate
Affected Product
Initial Access
Technique Title
ID
Use
Exploit Public-Facing Application
T1190
Gunra actors exploited vulnerabilities in FortiGate firewall and SSL-VPN appliances to gain initial access to victim networks.
Intelligence Sources
TheRecord
2026-08-10
CyberScoop
2026-08-10
CISA
2026-08-10
The Hacker News
2026-08-11
Dark Reading
2026-08-11
Infosecurity-Magazine
2026-08-12
Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure
Infosecurity-Magazine
Unpublish from Social Media?
Are you sure you want to delete this podcast video from all synchronized social networks (YouTube, Facebook, Threads)?
Important:
Due to Meta API restrictions, Instagram Reels cannot be deleted automatically via API by third-party apps.
View Profile to Delete Manually
View Profile to Delete Manually
Tactical Intelligence
Report Intelligence Issue
Podcast Options
Generate
Reset / Delete
Incident Version History
CURRENT VERSION
Last Updated: 2026-08-13T06:33
Comprehensive Tactical Telemetry
Highly Correlated Entities
96x
organisation
Identified Entity
Gunra
entity
58x
attribution
Attributing Entity
Fortinet
authority
52x
timeline
Temporal Reference
2022
date
50x
tactic
MITRE ATT&CK Technique
T1588.005 - Exploits
technique
14x
infrastructure
Software Version
19.1
version
10x
target region
Target Country
United States
country
10x
industry
Targeted Sector
Government
sector
9x
tactic
Cyber Operation Type
Ransomware
tactic
6x
infrastructure
Affected Product
Microsoft 365
software
6x
target region
Target Region
MIDDLE_EAST
region
3x
vulnerability
Exploited CVE
CVE-2024-55591
cve
3x
threat actor
APT Group
Andariel
actor
2x
malware
Malware Payload
Conti
tool
2x
source region
Origin Country
United States
country
2x
general metric
P.M.
10
p.m.
2x
source region
Origin Region
MIDDLE_EAST
region
2x
malware
Offensive Tool
Sliver
tool
Contextual Telemetry
Context Block
24 METRICS
general metric
Services
365
services
victims
Victims
51
victims
general metric
Signbt
3
signbt
data breach
Tb
9
tb
financial
Ransomware Incidents
1,140
ransomware incidents
general metric
%
12
%
financial
Dollars
10,000,000
dollars
financial
Ransomware
1
ransomware
victims
Sectors
2
sectors
general metric
Entities
7
entities
general metric
Collection
9
collection
infrastructure
Zip
7
zip
general metric
Cmd.Exe
13
cmd.exe
general metric
Table
1
table
general metric
Lists
2
lists
general metric
Say Cisa
844
say cisa
general metric
Cisa
2,472
cisa
general metric
Cyfirma
4
cyfirma
general metric
Bonaobra
5
bonaobra
general metric
Cloudsek
8
cloudsek
general metric
Virustotal
11
virustotal
general metric
Breakglass
14
breakglass
general metric
Version
19
version
general metric
System
112
system
Click on any entity below to view its context in the main text!
Selective Unpublish
Selecciona las redes de las que quieres eliminar esta publicación. El sistema intentará borrar el post real de la API y limpiará la base de datos para que puedas volver a lanzarlo.
By navigating this website, you accept the use of strictly necessary technical cookies for session security and basic platform functionality. We do not use tracking or advertising cookies.
Read our Privacy Policy.