149.102.229[.]154IP address
Reported by 1 independent source · first reported by Kaspersky Securelist · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO“149.102.229[.]154”
Indicators reported together
named in the same reports- 0108656a3e1ade6ca4f21b084f5e1208in 1 report
- bea5e267f24d7da59f6821bffdbff293in 1 report
- 37.19.210[.]12in 1 report
- 146.70.117[.]239in 1 report
- 104.164.55[.]46in 1 report
- 104.28.162[.]228in 1 report
- 104.28.163[.]162in 1 report
- 64.190.76[.]14in 1 report
- 192.42.116[.]50in 1 report
- 192.42.116[.]12in 1 report
- 192.42.116[.]56in 1 report
- 192.42.116[.]97in 1 report
- 192.42.116[.]52in 1 report
Copy these 13 indicators · defanged
Thanks — we review every report.