159[.]198[.]41[.]140

Posts referencing this indicator

• Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign

  KKaspersky

  Primary C2 server for BusySnake Stealer — receives task polling requests via GET /get_task and status reports via POST /report_status

  2026-07-03