Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
indicator
url
hxxp://83[.]142[.]209[.]214:8080/isp[.]sh
copy defanged
copy refanged (live)
First seen
2026-06-24
Last seen
2026-06-24
Sightings
1
Posts referencing this indicator
From Langflow to Monero: Inside CVE-2026-33017 Cryptominer
Trend Micro
URL used to download the initial bash dropper script.
2026-06-24
http://83.142.209.214:8080/isp.sh · URL · cyfar.ca
