rssh.li
Classification: Malicious
rssh.li is a malicious hostname. Linked to Gamaredon Group activity. Reported by 2 threat sources, last seen 2023-03-26.
Current activity
- Offline — no longer resolving. Last online 2024-02-13 20:23:42.
MITRE ATT&CK associations
Intrusion sets: GAMAREDON GROUP (G0047)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Razor Tiger | Maltiverse | 2023-03-25 05:46:33 | 2023-03-26 18:35:21 | malicious-activity | |
| Gamaredon Group | Maltiverse | 2023-03-25 05:46:40 | 2023-03-26 18:35:20 | malicious-activity | G0047 Gamaredon Group |
| Malware Download | URLhaus Abuse.ch | 2023-02-16 08:18:56 | 2023-02-21 07:18:27 | malicious-activity |
Tags
apt malware_downloadIP addresses resolved by this hostname
- 167.71.180.191 (2023-02-16 08:18:56)
- 146.190.208.212 (2023-02-23 19:04:00)
- 37.1.210.40 (2023-03-18 21:19:00)
- 38.180.6.58 (2023-03-19 06:18:34)
- 75.2.60.5 (2024-02-13 20:23:42)
Whois information
- Domain
- rssh.li
- TLD
- li
- First indexed
- 2023-02-16 08:18:56
- Last updated
- 2026-08-06 01:35:45