Skip to content

Instantly share code, notes, and snippets.

@MrCl0wnLab

MrCl0wnLab/DECODE URL.md

Last active March 1, 2021 18:04
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save MrCl0wnLab/22fc5c2a32107eab1f4f14979b96f692 to your computer and use it in GitHub Desktop.
Save MrCl0wnLab/22fc5c2a32107eab1f4f14979b96f692 to your computer and use it in GitHub Desktop.
Download ZIP
@pypi that point to a malicious URL 101.32.99.28
Raw
DECODE URL.md
Raw
IOC.md 
101.32.99.28
579b6f14ba49f7b70d0c1e22168730b4e4c913c53642df89a4471e8e53de9e0d
86e250af940be5e3d21ba9ffbb8bc4f55b6e86e6923e4fa476b959ce13cfc856
b8b4d1d77597b691918c850953b70c98fa178be28faf756a5aa0dddf8b96ab33
Raw
IP INFO.md

IP INFO

{
    "ip": "101.32.99.28",
    "city": "Tokyo",
    "region": "Tokyo",
    "country": "JP",
    "loc": "35.6772,139.7708",
    "org": "AS132203 Tencent Building, Kejizhongyi Avenue",
    "postal": "104-0031",
    "timezone": "Asia/Tokyo",
    "asn": {
        "asn": "AS132203",
        "name": "Tencent Building, Kejizhongyi Avenue",
        "domain": "tencent.com",
        "route": "101.32.96.0/20",
        "type": "hosting"
    },
    "company": {
        "name": "ACEVILLE PTE.LTD.",
        "domain": "tencent.com",
        "type": "hosting"
    },
    "privacy": {
        "vpn": false,
        "proxy": false,
        "tor": false,
        "hosting": true
    },
    "abuse": {
        "address": "16 COLLYER QUAY, # 18-29, INCOME AT RAFFLES, SINGAPORE",
        "country": "SG",
        "email": "qcloud_net_duty@tencent.com",
        "name": "ACEVILLE PTELTD administrator",
        "network": "101.32.0.0/16",
        "phone": "+8613923479936"
    },
    "domains": {
        "total": 0,
        "domains": []
    },
    "isLimited": false,
    "tokenDetails": {
        "core": {
            "daily": 2147483647,
            "monthly": 50000
        },
        "hostio": {
            "daily": 2147483647,
            "monthly": 1000,
            "result_limit": 5
        }
    }
}
Raw
Threat Actor User.md

Threat Actor User:

https://pypi.org/user/RemindSupplyChainRisks/

Projects

https://pypi.org/project/yacc/
https://pypi.org/project/coregl/
https://pypi.org/project/appengine-sharded-counters/
https://pypi.org/project/wufoo/
https://pypi.org/project/tobo/
https://pypi.org/project/sms-notify/
https://pypi.org/project/samurai-example/
https://pypi.org/project/novaclient-build/
https://pypi.org/project/courses/
https://pypi.org/project/socket-server/
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment