#badIP - Twitter Hashtag

about 1 year ago

🚨#DEVMAN #RANSOMWARE: IP EXPOSED 📍38.132.122.213 🇺🇸 📍38.132.122.214 🇺🇸 #AS9009🇷🇴 https://t.co/OfTEmC0Nuk Linked: https://t.co/nbrifiw2lL More: https://t.co/9PvXi4WRTn #infosec #OSINT #hack #security #malware #TOR #phishing #netsec #threatintel #threatintelligence #badip

RakeshKrish12's tweet photo. 🚨#DEVMAN #RANSOMWARE: IP EXPOSED

📍38.132.122.213 🇺🇸
📍38.132.122.214 🇺🇸
#AS9009🇷🇴
https://t.co/OfTEmC0Nuk

Linked: https://t.co/nbrifiw2lL

More: https://t.co/9PvXi4WRTn

#infosec #OSINT #hack #security #malware #TOR #phishing #netsec #threatintel #threatintelligence #badip https://t.co/QPanytx6bj

RAKESH KRISHNAN @RakeshKrish12

about 1 year ago

#DEVMAN #Ransomware announced, listed victims from #Qilin & #APOS https://t.co/OfTEmC0fEM Also explained how they infiltrated a victim! Tools Used: CrackMapExec, #EternalBlue #Exploit (MS17-010), iamdidy.exe (from APOS) #security #infosec #OSINT #hack #darkweb #malware #TOR

RakeshKrish12's tweet photo. #DEVMAN #Ransomware announced, listed victims from #Qilin & #APOS

https://t.co/OfTEmC0fEM

Also explained how they infiltrated a victim!

Tools Used: CrackMapExec, #EternalBlue #Exploit (MS17-010), iamdidy.exe (from APOS)

#security #infosec #OSINT #hack #darkweb #malware #TOR https://t.co/fj92pN82Qh

0

46

4

29

28K

1

21

3

12

5K

RAKESH KRISHNAN @RakeshKrish12

almost 2 years ago

🚨Fake #LOCKBIT #Ransomware spotted! MD5: 3870e4591ce517d956771e23c361582d FileName: ctrsys.exe [email protected] [email protected] More Info: https://t.co/gThhKHd1mr #ioc #badip #malip #infosec #security #cybersecurity #hack #OSINT #darkweb #deepweb #infostealer #malware

RakeshKrish12's tweet photo. 🚨Fake #LOCKBIT #Ransomware spotted!

MD5: 3870e4591ce517d956771e23c361582d
FileName: ctrsys.exe

gogo875@proton.me
wdon90347@gmail.com

More Info: https://t.co/gThhKHd1mr

#ioc #badip #malip #infosec #security #cybersecurity #hack #OSINT #darkweb #deepweb #infostealer #malware https://t.co/H2PUaHn4oU

0

10

1

1K

RAKESH KRISHNAN @RakeshKrish12

almost 2 years ago

194.26.229.212 185.172.128.52 109.107.189.163 185.172.128.52 #cybersecurity #badip #rat #ioc

0

2

0

2

478

RAKESH KRISHNAN @RakeshKrish12

almost 2 years ago

Found new DLS of #Blackbasta #Ransomware! stuffstevenpeters2[.]top 185.68.93.191 onlylegalstuff3[.]top 185.68.93.185 These IPs linked with #UNC2452 for #SolarWinds #Hack! More details : https://t.co/t9KFpT4gJU #infosec #security #malware #OSINT #badip #malip #darkweb #TOR

RakeshKrish12's tweet photo. Found new DLS of #Blackbasta #Ransomware!

stuffstevenpeters2[.]top
185.68.93.191
onlylegalstuff3[.]top
185.68.93.185

These IPs linked with #UNC2452 for #SolarWinds #Hack!

More details : https://t.co/t9KFpT4gJU

#infosec #security #malware #OSINT #badip #malip #darkweb #TOR https://t.co/uLQJjbhDOM

1

33

12

5K

RAKESH KRISHNAN @RakeshKrish12

over 2 years ago

#Lazarus still using this C2 #IP to infect 🇰🇷 victims via legitimate #initech software certificate! 165.194.123.67 This dates back to 2016 in #RifleCampaign! #infosec #security #hack #OSINT #darkweb #cybersecurity #aptgroup #APT #malware #ransomware #badip #deepweb #netsec

RakeshKrish12's tweet photo. #Lazarus still using this C2 #IP to infect 🇰🇷 victims via legitimate #initech software certificate!

165.194.123.67

This dates back to 2016 in #RifleCampaign!

#infosec #security #hack #OSINT #darkweb #cybersecurity #aptgroup #APT #malware #ransomware #badip #deepweb #netsec https://t.co/U9OwI89Izv

1

11

2

0

2K

RAKESH KRISHNAN @RakeshKrish12

over 2 years ago

New #Ransomware Leak Site is getting ready titled "#BlackDolphin"; hosted in Russia! 91.215.85.204 Same IP observed in #gozi #botnet earlier! #ursnif #Gozi #threatintel #infosec #security #hack #malware #OSINT #darkweb #cybersecurity #cybersec #dataleak #databreach #TOR #badip

RakeshKrish12's tweet photo. New #Ransomware Leak Site is getting ready titled "#BlackDolphin"; hosted in Russia!

91.215.85.204
Same IP observed in #gozi #botnet earlier!

#ursnif #Gozi #threatintel #infosec #security #hack #malware #OSINT #darkweb #cybersecurity #cybersec #dataleak #databreach #TOR #badip https://t.co/CxKb7ewizb

1

22

1

11

3K

RAKESH KRISHNAN @RakeshKrish12

almost 3 years ago

#cl0p #ransomware file hosting servers located to Russia🇷🇺! Here are some IPs:- 81.19.135.21 81.19.135.25 81.19.135.31 81.19.136.221 #OSINT #threatintelligence #threatintel #hack #malware #infosec #badip #security #darkweb #TOR #netsec #cybersecurity #cybersec #clop #raas

3

32

4

6

6K

Daily OSINT @DailyOsint

almost 6 years ago

Over 10 mln bad IPs in the https://t.co/6ZUXvhQ5Ko database. Search your self or your organization's IPs #badip #ipreputation #osint

DailyOsint's tweet photo. Over 10 mln bad IPs in the https://t.co/6ZUXvhQ5Ko database.
Search your self or your organization's IPs

#badip #ipreputation #osint https://t.co/0C7Fgzxl7Q

0

5

2

1

0

STAY-IN PROJECT @stayinproject

over 6 years ago

3rd session of ASD early intervention programs. Knowing PACT Model #ASDTraining @autismoavila @CEFIREambitINC #cefireValència @MiramFundacio @IRTIC_UV @GVA_Cefire #BADIP #sCOALAsPECTRUM #FoundatiaMarcelProdan @sepiegob @martinezsilvia_

stayinproject's tweet photo. 3rd session of ASD early intervention programs. Knowing PACT Model #ASDTraining @autismoavila
@CEFIREambitINC
#cefireValència @MiramFundacio
@IRTIC_UV
@GVA_Cefire
#BADIP #sCOALAsPECTRUM #FoundatiaMarcelProdan @sepiegob
@martinezsilvia_ https://t.co/Jd6f7PTYkN

0

11

1

0

STAY-IN PROJECT @stayinproject

over 6 years ago

2nd session of ASD early intervention programs. Knowing ESDM Model #ASDTraining @autismoavila @CEFIREambitINC #cefireValència @MiramFundacio @IRTIC_UV @GVA_Cefire #BADIP #sCOALAsPECTRUM #FoundatiaMarcelProdan @sepiegob @martinezsilvia_

stayinproject's tweet photo. 2nd session of ASD early intervention programs. Knowing ESDM Model #ASDTraining @autismoavila @CEFIREambitINC #cefireValència @MiramFundacio @IRTIC_UV @GVA_Cefire #BADIP #sCOALAsPECTRUM #FoundatiaMarcelProdan @sepiegob @martinezsilvia_ https://t.co/jB7aiVuqw1

0

18

11

0

0DΛY

@0daySimpson

almost 7 years ago

Confirmed targeted AWS S3 probing from: IP: 188.127.118.226 AccountID: 318387110296 UserAgent: aws-cli/1.16.192 Python/2.7.16 Darwin/18.6.0 botocore/1.12.182 Operating out of Bosnia and Herzegovina, not associated with any previously known attackers #BadIP #DFIR

0daySimpson's tweet photo. Confirmed targeted AWS S3 probing from:

IP: 188.127.118.226
AccountID: 318387110296
UserAgent: aws-cli/1.16.192 Python/2.7.16 Darwin/18.6.0 botocore/1.12.182

Operating out of Bosnia and Herzegovina, not associated with any previously known attackers

#BadIP #DFIR https://t.co/LzOc0YQgMb

1

0

Nelson veloso @Nelsonveloso8

about 7 years ago

#BadiP 💪

#KITEKE @altifridi

about 7 years ago

“Só pela tua atitude vou te dar 1 milhão “

5

292

40

0

1

6

1

0

ACDH-CH @ACDH_OeAW

almost 8 years ago

#OA NEUERSCHEINUNG! #ACDH Dir. Karlheinz Mörth u. Tanja Wissik berichten über digitale Sprachressourcen in Österreich: @CLARINERIC #CLARIAH @DARIAHeu #DHA #GAMS #PHAIDRA #VLEditor #tokenEditor @Transkribus #BadIP etc.🔎Link: https://t.co/sn7fntFRnC @dsUniVie@UniVieTrans @DH_Graz

0

2

3

0

0DΛY

@0daySimpson

over 8 years ago

I seriously wonde why Phishing scum doesnt run their campaigns through language/grammar checks. It would probably up the success rate quite a bit. #BadIP 209.188.95.210