telegram.org.security.ohsxy.com
Classification: Malicious
telegram.org.security.ohsxy.com is a malicious hostname. Linked to Sandworm Team activity. Reported by 1 threat source, last seen 2023-04-28.
Current activity
- Offline — no longer resolving. Last online 2023-07-07 00:43:11.
MITRE ATT&CK associations
Intrusion sets: SANDWORM TEAM (G0034)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Electrum | Maltiverse | 2023-04-27 04:27:30 | 2023-04-28 14:38:42 | malicious-activity | G0034 Sandworm Team |
Tags
aptIP addresses resolved by this hostname
- 5.79.79.210 (2023-04-30 00:15:46)
- 199.115.115.102 (2023-05-02 03:17:46)
- 81.171.22.6 (2023-05-03 03:36:37)
- 5.79.79.212 (2023-05-04 03:15:55)
- 5.79.79.211 (2023-05-05 06:13:07)
- 162.254.207.58 (2023-05-06 03:17:41)
- 162.254.207.51 (2023-05-06 12:23:07)
- 162.254.207.52 (2023-05-08 15:23:50)
- 162.254.207.62 (2023-05-09 09:10:00)
- 70.32.1.32 (2023-06-16 06:43:11)
- 199.115.116.43 (2023-06-19 00:42:13)
- 170.178.183.18 (2023-06-19 21:43:59)
- 103.224.212.221 (2023-07-07 00:43:11)
Whois information
- AS name
- AS60781 LeaseWeb Netherlands B.V.
- Domain
- ohsxy.com
- TLD
- com
- First indexed
- 2023-04-28 14:38:42
- Last updated
- 2023-04-28 14:38:42