{
  "aliases": [
    "magalenha"
  ],
  "attack_id": null,
  "attack_name": null,
  "attack_url": null,
  "counts": {
    "ipv4": 1,
    "url": 19
  },
  "first_seen": {
    "ipv4": {
      "81.200.152.38:9000": "2023-07-24"
    },
    "url": {
      "http://128.199.228.142": "2023-07-24",
      "http://128.199.68.249": "2023-07-24",
      "http://157.245.44.246": "2023-07-24",
      "http://176.57.221.92": "2023-07-24",
      "http://178.128.174.182": "2023-07-24",
      "http://193.218.204.207": "2023-07-24",
      "http://2.59.41.206": "2023-07-24",
      "http://213.226.124.48": "2023-07-24",
      "http://45.95.234.10": "2023-07-24",
      "http://85.193.80.19": "2023-07-24",
      "http://85.193.83.224": "2023-07-24",
      "http://85.193.95.154": "2023-07-24",
      "http://85.217.170.140": "2023-07-24",
      "http://87.249.44.177": "2023-07-24",
      "http://89.223.68.22": "2023-07-24",
      "http://92.255.76.181": "2023-07-24",
      "http://92.53.107.216": "2023-07-24",
      "http://94.156.35.182": "2023-07-24",
      "http://94.228.121.36": "2023-07-24"
    }
  },
  "first_seen_precision": {
    "ipv4": {},
    "url": {}
  },
  "first_seen_range": {
    "earliest": "2023-07-24",
    "latest": "2023-07-24"
  },
  "generated_at": "2026-08-08T03:26:30+00:00",
  "indicators": {
    "ipv4": [
      "81.200.152.38:9000"
    ],
    "url": [
      "http://128.199.228.142",
      "http://128.199.68.249",
      "http://157.245.44.246",
      "http://176.57.221.92",
      "http://178.128.174.182",
      "http://193.218.204.207",
      "http://2.59.41.206",
      "http://213.226.124.48",
      "http://45.95.234.10",
      "http://85.193.80.19",
      "http://85.193.83.224",
      "http://85.193.95.154",
      "http://85.217.170.140",
      "http://87.249.44.177",
      "http://89.223.68.22",
      "http://92.255.76.181",
      "http://92.53.107.216",
      "http://94.156.35.182",
      "http://94.228.121.36"
    ]
  },
  "last_modified": "2026-01-02T23:10:15+00:00",
  "maltrail_groups": [
    "PEEPINGTITLE"
  ],
  "references": [
    "https://www.sentinelone.com/labs/operation-magalenha-long-running-campaign-pursues-portuguese-credentials-and-pii/"
  ],
  "related": [],
  "slug": "PEEPINGTITLE",
  "timeline": [
    {
      "counts": {
        "ipv4": 1,
        "url": 19
      },
      "first_seen": "2023-07-24",
      "indicators": {
        "ipv4": [
          "81.200.152.38:9000"
        ],
        "url": [
          "http://128.199.228.142",
          "http://128.199.68.249",
          "http://157.245.44.246",
          "http://176.57.221.92",
          "http://178.128.174.182",
          "http://193.218.204.207",
          "http://2.59.41.206",
          "http://213.226.124.48",
          "http://45.95.234.10",
          "http://85.193.80.19",
          "http://85.193.83.224",
          "http://85.193.95.154",
          "http://85.217.170.140",
          "http://87.249.44.177",
          "http://89.223.68.22",
          "http://92.255.76.181",
          "http://92.53.107.216",
          "http://94.156.35.182",
          "http://94.228.121.36"
        ]
      },
      "precision": "exact",
      "references": [
        "https://www.sentinelone.com/labs/operation-magalenha-long-running-campaign-pursues-portuguese-credentials-and-pii/"
      ],
      "total": 20
    }
  ]
}