200.107.207[.]26IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 8 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Shaping Shadows: Breaking Down New ShadowSyndicate Methods and Infrastructure“According to Group-IB telemetry, we have seen server 200.107.207[.]26, at the same time with SSH fingerprint 55c658703c07d6344e325ea26cf96c3b, used by Cl0p in their campaigns with moderate to high confidence.”
Thanks — we review every report.