Threat IntelligenceMar 18, 2026
ZABBIX panel here: http://46.30.188[.]99:8443/login - same 8443 port just as for the previously s...
Security researcher identified a compromised server at 46.30.188.99 hosting multiple malicious services including an exposed Zabbix monitoring panel, open directory listing, and ClickFix phishing lure across ports 8443, 9090, and 80. This appears to be part of an active attack infrastructure used for credential theft and lateral movement.
Summary
Security researcher identified a compromised server at 46.30.188.99 hosting multiple malicious services including an exposed Zabbix monitoring panel, open directory listing, and ClickFix phishing lure across ports 8443, 9090, and 80. This appears to be part of an active attack infrastructure used for credential theft and lateral movement.
Indicators of Compromise
- ip — 46.30.188.99
- url — http://46.30.188.99:8443/login
- url — http://46.30.188.99:9090/
- malware — ClickFix