C2 Traffic to Aeza Group Bulletproof Hosting Infrastructure (AS210644)

Emiliano Mema@Nosalva

•updated Aug 28, 2026•0•0•2

Detects outbound network connections to known command-and-control infrastructure associated with the Aeza Group bulletproof hosting provider. The rule monitors for connections to specific malicious IP addresses, traffic on TCP port 8133, and requests to the domain 'profitnow.io'.