ctrlINT What the industry said about every indicator, with the quote

166.62.100[.]52IP address

Reported by 1 independent source · first reported by The DFIR Report · last reported

Last reported 7 months ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “Using YARA and speakeasy allowed us to confirm it as a Metasploit executable that communicated with 166.62.100[.]52.”

    The DFIR ReportVendor
    Apache ActiveMQ Exploit Leads to LockBit Ransomware

Indicators reported together

named in the same reports
Copy these 6 indicators · defanged

Also named with it: CVE-2023-46604

Thanks — we review every report.

Report a wrong value
What is wrong with 166.62.100[.]52 here?
No account needed. We do not store your IP address.