193.242.184[.]150IP address
Reported by 1 independent source · first reported by The DFIR Report · last reported
Last reported 3 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira“… flow analysis revealed approximately 2.5GB of data transferred from the domain controller to the threat actor controlled server at 193.242.184[.]150 over port 22.”
-
Flash Alert: From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira“In a subsequent session, the threat actor established a SSH tunnel to an external server at 193.242.184[.]150 to proxy their activity.”
Indicators reported together
named in the same reports- opmanager[.]proin 2 reports
- ip-scanner[.]orgin 2 reports
- 170.130.55[.]223in 2 reports
- 188.40.187[.]145in 2 reports
- 109.205.195[.]211in 2 reports
- ev2sirbd269o5j[.]orgin 2 reports
- 2rxyt9urhq0bgj[.]orgin 2 reports
- 172.96.137[.]160in 2 reports
- 185.174.100[.]203in 2 reports
- 186b26df63df3b73…c1936f0aa5dain 2 reports
- a6df0b49a5ef9ffd…eb1914945331in 2 reports
- de730d969854c369…9fff6edce19din 2 reports
- zenmap[.]proin 1 report
- download-server[.]onlinein 1 report
- soft-server[.]onlinein 1 report
- soft-hub[.]proin 1 report
- hxxps://tria[.]ge/250530-ttmjhayzhwin 1 report
- tria[.]gein 1 report
- hxxps://tria[.]ge/250812-zw4tfszpy4in 1 report
- netml[.]shopin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.