ClawHavoc/Miasma campaign operator RDP workstation with NexusVPN. Port 3389 Windows. Part of 91.92.2 ...
show moreClawHavoc/Miasma campaign operator RDP workstation with NexusVPN. Port 3389 Windows. Part of 91.92.240.0/22 bulletproof cluster (aurologic GmbH / MGN Teknoloji AS202412). VES-CA-2026-001, VertexElite Security Research.
show less
ClawHavoc/Miasma AI supply-chain campaign web/nginx node. Self-signed cert. Part of 91.92.240.0/22 b ...
show moreClawHavoc/Miasma AI supply-chain campaign web/nginx node. Self-signed cert. Part of 91.92.240.0/22 bulletproof cluster (aurologic GmbH / MGN Teknoloji AS202412). VES-CA-2026-001, VertexElite Security Research.
show less
ClawHavoc/Miasma campaign operator RDP workstation. Port 3389 Windows self-signed. Part of 91.92.240 ...
show moreClawHavoc/Miasma campaign operator RDP workstation. Port 3389 Windows self-signed. Part of 91.92.240.0/22 bulletproof cluster (aurologic GmbH / MGN Teknoloji AS202412). VES-CA-2026-001, VertexElite Security Research.
show less
Turkish C2 node linked to ClawHavoc/Miasma campaign. PTR slot0.asident-tr.com, OpenSSH 9.6p1. Part o ...
show moreTurkish C2 node linked to ClawHavoc/Miasma campaign. PTR slot0.asident-tr.com, OpenSSH 9.6p1. Part of AS202412 Omegatech cluster. VES-CA-2026-001, VertexElite Security Research (vertexelite.org).
show less
ClawHavoc/Miasma campaign phishing infrastructure. Hosts fmlshlms.cc with 71 wildcard subdomains (Cl ...
show moreClawHavoc/Miasma campaign phishing infrastructure. Hosts fmlshlms.cc with 71 wildcard subdomains (Cloudflare-fronted). Part of 91.92.240.0/22 bulletproof cluster (MGN Teknoloji AS202412). VES-CA-2026-001, VertexElite Security Research.
show less
DHL phishing and C2 node linked to ClawHavoc/Miasma AI supply-chain campaign. Ubuntu/OpenSSH 8.9p1, ...
show moreDHL phishing and C2 node linked to ClawHavoc/Miasma AI supply-chain campaign. Ubuntu/OpenSSH 8.9p1, dual-stack SMB/RDP/WinRM, EOL OS. VES-CA-2026-001, VertexElite Security Research (vertexelite.org).
show less
ClawHavoc/Miasma AI supply-chain campaign backup C2 node. Part of 91.92.240.0/22 bulletproof cluster ...
show moreClawHavoc/Miasma AI supply-chain campaign backup C2 node. Part of 91.92.240.0/22 bulletproof cluster (aurologic GmbH / MGN Teknoloji AS). Ran Windows C2 (RDP/WinRM/SMB), rotated to Ubuntu OpenSSH 9.6p1. VES-CA-2026-001 research by VertexElite Security Research (vertexelite.org).
show less
ClawHavoc/Miasma AI supply-chain campaign C2 backend node. PostgreSQL, Redis 8.2.5, RabbitMQ 3.11.28 ...
show moreClawHavoc/Miasma AI supply-chain campaign C2 backend node. PostgreSQL, Redis 8.2.5, RabbitMQ 3.11.28, nginx. Rotated to mail/STARTTLS stack. Part of 91.92.240.0/22 bulletproof cluster (MGN Teknoloji AS202412). VES-CA-2026-001, VertexElite Security Research.
show less
HackingExploited Host
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.