78.128.112[.]209IP address
Reported by 1 independent source · first reported by Group-IB · last reported
Last reported 8 months ago
What the reports say
1 report, newest first · the exact sentence from each-
Shaping Shadows: Breaking Down New ShadowSyndicate Methods and Infrastructure“Group-IB Threat Intelligence has found traces of Havoc on server 78.128.112[.]209 at the same time with SSH fingerprint 081d96a941fa72747b5cfca5e6b2f1b9.”
Thanks — we review every report.