70.152.145[.]147IP address
Reported by 1 independent source · first reported by Red Canary · last reported
Last reported 4 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Investigating suspicious AI workflows in Microsoft Entra Agent ID: Agent’s user account“"ClientIP": "::ffff:70.152.145[.]147",”
Indicators reported together
named in the same reports- 51.3.97[.]221in 1 report
- 5e98eabef5ea551db4e9daa0264515b4in 1 report
- hxxps://domoarigato[.]ai/in 1 report
- domoarigato[.]aiin 1 report
- hxxps://login.microsoftonline[.]com/$TargetEntraTenantID/oauth2/v2.0/tokenin 1 report
Copy these 5 indicators · defanged
Thanks — we review every report.