Unit 42 published IOCs ↗
- Evidence class
- provider reported
- Source family label
- Not reported
- Source confidence
- Not reported
- Observed
- 2025-01-11 05:00 UTC
- Retrieved
- 2026-10-08 07:52 UTC
URL http://ip-api.com/line/?fields=hosting
Indicator published by the cited source.
Reference details
- Source context
stix2-reports/report_json/2025-01-10-campaign-using-CVE-2017-0199-XLS-files.json- First reported
- 2025-01-11 05:00 UTC
- Last reported
- 2025-01-11 05:00 UTC
- Catalog updated
- 2026-10-08 07:52 UTC
Tags
Published indicators
Network addresses are displayed in defanged form.
URL
hxxp://ip-api[.]com/line/?fields=hosting