ctrlINT What the industry said about every indicator, with the quote

193.233.202[.]17IP address

Reported by 1 independent source · first reported by Huntress · last reported

Last reported 5 months ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “…d as the legitimate Windows system process svchost.exe, created a SOCKS proxy connection to a command-and-control (C2) IP address at 193.233.202[.]17 on port 44729.”

    HuntressVendorC2
    The Gentleman Ransomware | Defense Evasion TTPs Uncovered

Indicators reported together

named in the same reports
Copy these 3 indicators · defanged

Also named with it: CVE-2024-55591

Thanks — we review every report.

Report a wrong value
What is wrong with 193.233.202[.]17 here?
No account needed. We do not store your IP address.