Proton66 Part 1: Mass Scanning and Exploit Campaigns
Tags
country: Hong Kong Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Indirect Models Control Panel - T1218.002 Dns - T1071.004 Dns - T1590.002 Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Software - T1592.002 Vulnerabilities - T1588.006 Vulnerability Scanning - T1595.002 Brute Force - T1110
Show in Graph
Common Information
Type Value
UUID 55b5d2a9-c967-4941-b6d6-026eadc403de
Fingerprint a7b108f9980f32c4
Analysis status DONE
Considered CTI value 2
Text language
Published April 14, 2025, 1:56 p.m.
Added to db April 14, 2025, 4:32 p.m.
Last updated April 17, 2025, 3:20 p.m.
Headline Proton66 Part 1: Mass Scanning and Exploit Campaigns
Title Proton66 Part 1: Mass Scanning and Exploit Campaigns
Detected Hints/Tags/Attributes 56/3/19
Source URLs
Redirection Url
Details Source https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/proton66-part-1-mass-scanning-and-exploit-campaigns/
URL Provider
Details Provider Source level domain
Details trustwave.com www.trustwave.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 387 ✔ SpiderLabs Blog https://www.trustwave.com/en-us/rss/spiderlabs-blog/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Autonomous System Number 7 
AS200593
Details Autonomous System Number 8 
AS198953
Details CVE 61 
cve-2025-0108
Details CVE 29 
cve-2024-41713
Details CVE 33 
cve-2024-10914
Details CVE 90 
cve-2024-55591
Details CVE 29 
cve-2025-24472
Details Domain 1 
my.31337.ru
Details Domain 1 
my.31337.hk
Details Domain 2 
billing.hostway.ru
Details Domain 46 
supportannouncement.us.dlink.com
Details File 46 
publication.aspx
Details IPv4 4 
45.135.232.0
Details IPv4 4 
45.140.17.0
Details IPv4 1 
45.134.26.8
Details IPv4 1 
45.135.232.24
Details IPv4 3 
193.143.1.65
Details IPv4 6 
9.8.1.201
Details Url 2 
https://supportannouncement.us.dlink.com/security/publication.aspx?name=sap10413