Add 172.245.123.21 - malware - Agent Tesla (#730)

* add 172.245.123.21 and related URI * add 192.3.95.229 and related URIs * add 51.222.104.17 and related domain
Phishing-Database · Jan 30, 2025 · 86dbb2f · 86dbb2f
1 parent e088e53
commit 86dbb2f
Show file tree

Hide file tree

Showing 6 changed files with 16 additions and 0 deletions.
diff --git a/IP-addr.cidr.in-addr.arpa b/IP-addr.cidr.in-addr.arpa
@@ -40,6 +40,7 @@
 32.166.121.148.45
 32.166.91.153.43
 32.169.35.153.43
+32.17.104.222.51
 32.171.87.251.47
 32.173.121.148.45
 32.174.209.171.142
@@ -62,6 +63,7 @@
 32.205.98.253.47
 32.207.68.153.43
 32.209.35.153.43
+32.21.123.245.172
 32.21.233.28.61
 32.21.254.188.91
 32.212.241.149.45
@@ -71,6 +73,7 @@
 32.220.199.106.170
 32.223.85.215.91
 32.224.120.251.47
+32.229.95.3.192
 32.231.139.205.154
 32.231.51.76.80
 32.236.187.106.170

diff --git a/IP-addr.cidr.list b/IP-addr.cidr.list
@@ -14,10 +14,12 @@
 170.106.199.220/32
 170.106.74.49/32
 170.106.81.46/32
+172.245.123.21/32
 184.174.97.59/32
 184.174.97.68/32
 185.81.115.28/32
 192.3.55.217/32
+192.3.95.229/32
 193.143.1.160/32
 193.143.1.54/32
 198.11.175.44/32
@@ -109,6 +111,7 @@
 49.51.71.26/32
 49.51.72.24/32
 5.182.210.39/32
+51.222.104.17/32
 61.28.233.21/32
 69.49.234.138/32
 79.137.197.154/32

diff --git a/IP-addr.in-addr.arpa b/IP-addr.in-addr.arpa
@@ -40,6 +40,7 @@
 166.121.148.45
 166.91.153.43
 169.35.153.43
+17.104.222.51
 171.87.251.47
 173.121.148.45
 174.209.171.142
@@ -62,13 +63,15 @@
 205.98.253.47
 207.68.153.43
 209.35.153.43
+21.123.245.172
 21.233.28.61
 21.254.188.91
 212.241.149.45
 215.65.153.43
 22.84.83.81
 220.199.106.170
 224.120.251.47
+229.95.3.192
 231.139.205.154
 231.51.76.80
 235.139.34.188

diff --git a/IP-addr.list b/IP-addr.list
@@ -14,12 +14,14 @@
 170.106.199.220
 170.106.74.49
 170.106.81.46
+172.245.123.21
 184.174.97.59
 184.174.97.68
 185.80.128.14
 185.81.115.28
 188.34.139.235
 192.3.55.217
+192.3.95.229
 193.143.1.160
 193.143.1.54
 198.11.175.44
@@ -108,6 +110,7 @@
 49.51.71.26
 49.51.72.24
 5.182.210.39
+51.222.104.17
 61.28.233.21
 69.49.234.138
 79.137.197.154

diff --git a/add-domain b/add-domain
@@ -77,6 +77,7 @@ youareanidiot.cc
 joinmarket.cloud
 www.joinmarket.cloud
 trust-web3.cn
+ftp.siscop.com.co
 discord.lossantossanto1.repl.co
 socialearn.co
 t.co

diff --git a/add-link b/add-link
@@ -1,6 +1,8 @@
 http://147.45.44.131/infopage/resafh7.exe
 http://147.45.44.131/infopage/vgqvs.bat
 http://147.45.44.131/infopage/vtqrai.exe
+http://192.3.95.229/FOR-XLSs-LMONDAYYYYMPDW-constraints.vbs
+http://192.3.95.229/siscorppppxxxxxxxxxxxxxxxxxxxxxxxx433.txt
 http://61.28.233.21/legal.zip
 http://83.222.191.91/oops/Kloki.005
 http://83.222.191.91/oops/Kloki.021
@@ -1778,6 +1780,7 @@ http://www.plugingeorgia.com/scam-escort-agency.html
 http://x.co/payclear
 http://yarravalleyrickshaws.com/ownership/update/index.php?email=
 https://0.fres-news.com/
+https://172.245.123.21/xampp/swee/maybegetbestresultsforfreshfruitskissingaroundtheglobalforyou.hta
 https://2m.ma/ar/
 https://30-09-vjer09tg-ej5rg-9jker-gk0e-trgjk-r90jg-0rejg-9rr.obs.ap-southeast-3.myhuaweicloud.com/uy046uy-hgh5ejt-ghew-rhvgb-ewbnhrgv-0er5g-0bnhewr-g0r.html?AWSAccessKeyId=Y33AQWKH1XTGWG0XAF5T&Expires=1664482499&Signature=tyelPWJ3cU86NCoVhF38c12fIlo%3D
 https://61f0r.r.ah.d.sendibm4.com/mk/cl/f/P4c6noeIW31hDASG9uhJPK1qjzYrNXTcbnOstxUYKsIbiLznkLiPZBx9NrkbmmHSlK-yL25tLbHqPxu5gjciHqr10x8IJ_ciLkEO2CEwa_p4haEWnnFmQvzDDFqtk-EL-Qlb49d7koD9-1yLWv9WAx-DbdT6T4t7f0Az8SuK4nkJd-MdRg