Skip to content
THE HUNTER’S LEDGER
IOC Feed
Inkognito Russian VPN/Phishing Operator (INK VPN / INK Lens)
80 indicators extracted from this investigation's feed. Filter by type, then copy or download exactly what is on screen.
Raw JSON feedFull reportDetection rules
80 shown
TypeIndicatorConfidenceAction
ipv4 176.124.211.174HIGHBLOCK
ipv4 185.112.83.228MODERATEMONITOR
ipv4 185.221.196.118HIGHBLOCK
ipv4 193.46.56.182HIGHBLOCK
ipv4 77.239.101.23HIGHBLOCK
ipv4 78.153.130.34MODERATEMONITOR
ipv4 79.137.203.87HIGHBLOCK
ipv4 91.108.241.156MODERATEBLOCK
ipv4 92.38.219.225HIGHMONITOR
ipv4 94.228.168.80MODERATEBLOCK
domain 00000xtrading.ruHIGHBLOCK
domain a-loader.siteLOWMONITOR
domain accenture.inklens.ru
domain adyen-no-stripe.inklens.ru
domain akredup.ruLOWMONITOR
domain anydesk.inklens.ru
domain api.inkconnect.ruHIGHBLOCK
domain api.inklens.co.ukHIGHBLOCK
domain asana.inklens.ru
domain authvpn.bikaf.ruHIGHBLOCK
domain autodiscover.blog.inklens.ru
domain bigass.monsterMODERATEBLOCK
domain bikaf.ruHIGHBLOCK
domain cam.bikaf.ruHIGHBLOCK
domain cam2.bikaf.ruHIGHBLOCK
domain cctv.bikaf.ruHIGHBLOCK
domain connect-pro-portal.inklens.ru
domain cryptone.botHIGHBLOCK
domain de1.inklens.co.ukHIGHBLOCK
domain demo-insights.inklens.ru
domain democrm.inklens.ru
domain development-jenkins.inklens.ru
domain divar-irantop.shopMODERATEHUNT
domain e-shop.inklens.ru
domain espace-client.inklens.ru
domain evotoptan.comMODERATEMONITOR
domain fi1.inklens.co.ukHIGHBLOCK
domain ger.bigass.monsterHIGHBLOCK
domain gr.nodes.unloki.ruHIGHBLOCK
domain hikvision.bikaf.ruHIGHBLOCK
domain ierkorprogramm.usLOWMONITOR
domain inkconnect.ruHIGHBLOCK
domain inklens.co.ukHIGHBLOCK
domain inklens.ruHIGHBLOCK
domain loadbalancer.bikaf.ruHIGHBLOCK
domain marzban.inklens.co.ukHIGHBLOCK
domain nat.bikaf.ruHIGHBLOCK
domain onlineforms.inklens.ru
domain owa2013.inklens.ru
domain petkovalegal.euHIGHBLOCK
domain rafael.inklens.ru
domain reverse-proxy.bikaf.ruHIGHBLOCK
domain signals.inklens.ru
domain sina.inklens.ru
domain siri-search.inklens.ru
domain stanley.inklens.ru
domain swdcdownloads.inklens.ru
domain tele2.inklens.ru
domain tencent.inklens.ru
domain travel.inklens.ru
domain travelid.inklens.ru
domain unloki.ruHIGHBLOCK
domain users.outline.unloki.ruHIGHBLOCK
domain vagtec.euHIGHBLOCK
domain vetcorbeanca.euHIGHBLOCK
domain video.bikaf.ruHIGHBLOCK
domain vpn1.bikaf.ruHIGHBLOCK
domain weatherzone.inklens.ru
domain wellsfargo.inklens.ru
domain www.api.inklens.co.ukHIGHBLOCK
url https://api.inkconnect.ru/HIGHBLOCK
url https://cryptone.bot/HIGHBLOCK
url https://inkconnect.ru/HIGHBLOCK
url https://inkconnect.ru/assets/index-CoeWw2zM.jsHIGHBLOCK
url https://inkconnect.ru/favicon.svgHIGHBLOCK
url https://inkconnect.ru/logo.pngHIGHBLOCK
url https://t.me/inkconnectvpnHIGHMONITOR
sha256 53b3515fda56dbbd1f8071a9ef3dc3be80cb7994df22ce8afc2e79147e899b70HIGH
sha256 8a69fe67a7e9908aa1248c632ffd784033fc4dc613d0b5589279ccc62f717978HIGH
sha256 d1ae63c928fd07d51cf79c5165e4431765201ca04a2bee3c309dc00092c4de7cHIGH

93 further values in this feed are not shown above, because they are not an indicator type that can be recognised reliably by shape: command names, fingerprints and behavioural patterns among them. They are all in the raw JSON, which remains the complete record.

Licensed CC BY 4.0, free to use commercially with attribution to The Hunters Ledger.