This IP is part of a NetNut residential proxy botnet. It was used for unauthorized access and passwo ...
show moreThis IP is part of a NetNut residential proxy botnet. It was used for unauthorized access and password changes on Steam and Gmail accounts
show less
Detected active connection to this IP from a suspicious process named 'directxdatabaseupdater' (PID ...
show moreDetected active connection to this IP from a suspicious process named 'directxdatabaseupdater' (PID 14364) and 'mpnotify.exe' on a Windows 11 system. Microsoft Defender flagged associated files as Trojan:Script/Wacatac.B!ml. IP is acting as a command-and-control (C2) server for script execution.
show less