情报共享 (0729)

吉沃运营专员

警惕红队使用内网渗透使用的工具 ZeroTireOne

据传某省电子税务局手机端被攻破

确定存在安全问题的产品

• 用友-GRP-U8 文件上传
• 蓝凌任意文件上传漏洞
• 金山终端安全系统远程代码执行
  

CS 上线地址

• 106.14.68.137
• 39.109.68.116
• 59.110.159.215
  

红队 IP 整理

1. 39.106.122.161
   
2. 221.216.117.177
   
3. 119.45.93.91
   
4. 119.45.20.160
   
5. 114.132.198.197
   
6. 118.195.160.188
   
7. 119.45.20.160
   
8. 43.129.158.31
   
9. 101.43.40.206
   
10. 111.173.115.93
    
11. 211.101.245.183
    
12. 47.93.50.179
    
13. 39.105.61.60
    
14. 39.107.75.75
    
15. 123.56.201.85
    
16. 39.106.20.147
    
17. 47.93.131.27
    
18. 47.93.10.244
    
19. 114.238.108.210
    
20. 223.88.84.1
    
21. 36.40.132.207
    
22. 36.113.101.195
    
23. 8.142.156.176
    
24. 220.196.60.61
    
25. 36.113.146.228
    
26. 8.131.88.174
    
27. 59.231.43.97
    
28. 60.205.190.138
    
29. 36.113.101.195
    
30. 123.56.22.69
    
31. 101.200.34.169
    
32. 39.105.170.22
    
33. 47.94.152.118
    
34. 39.96.196.196
    
35. 39.96.199.120
    
36. 39.105.120.26
    
37. 36.113.146.228
    
38. 8.142.156.176
    
39. 112.32.136.21
    
40. 124.217.188.178
    
41. 36.35.119.246
    
42. 47.100.30.25
    
43. 47.111.17.113
    
44. 49.234.243.251
    
45. 123.57.244.25
    
46. 39.103.76.114
    
47. 39.107.242.66
    
48. 123.56.126.94
    
49. 47.93.158.180
    
50. 101.200.186.25
    
51. 39.103.84.245
    
52. 60.205.158.146
    
53. 8.131.76.248
    
54. 45.33.2.79
    
55. 131.107.255.255
    
56. www.oatest.cf
    
57. www.msfconnecttest.com
    
58. dns.msftncsi.com
    
59. 180.163.238.132 确认红队
    
60. 106.38.72.118 大致确认红队
    
61. 123.126.82.6 大致确认红队
    
62. 220.246.124.60 大致确认红队
    
63. 47.110.151.18 大致确认红队
    
64. 39.103.167.226 大致确认红队
    
65. 36.161.237.235 大致确认红队

复制代码