193.5.65[.]114IP address
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
Ready, Settra, Go: New Settra Ransomware Variant Deploys MeshAgent RMM“This RMM instance was not renamed, and pointed to the IP address 193.5.65[.]114, which not only appeared in the certificate information for the MeshAgent executable, but was also in the active network connections retrieved from the endpoint at the time of the incident.”
Indicators reported together
named in the same reports- 45.13.122[.]7in 1 report
Copy this indicator · defanged
Thanks — we review every report.