Indicators of Compromise

50.243.177.161

UTA0178 IP address observed interacting with compromised device tied to Cyberoam proxy network

50.213.208.89

UTA0178 IP address observed interacting with compromised device tied to Cyberoam proxy network

64.24.179.210

UTA0178 IP address observed interacting with compromised device tied to Cyberoam proxy network

75.145.224.109

UTA0178 IP address observed interacting with compromised device tied to Cyberoam proxy network

50.215.39.49

UTA0178 IP address observed interacting with compromised device tied to Cyberoam proxy network

71.127.149.194

UTA0178 IP address observed interacting with compromised device tied to Cyberoam proxy network

173.53.43.7

UTA0178 IP address observed interacting with compromised device tied to Cyberoam proxy network

206.189.208.156

DigitalOcean IP address tied to UTA0178

73.128.178.221

UTA0178 IP address observed interacting with compromised device tied to Cyberoam proxy network

gpoaccess.com

Suspected UTA0178 domain discovered via domain registration patterns

webb-institute.com

Suspected UTA0178 domain discovered via domain registration patterns

75.145.243.85

UTA0178 IP address observed interacting with compromised device

47.207.9.89

UTA0178 IP address observed interacting with compromised device tied to Cyberoam proxy network

98.160.48.170

UTA0178 IP address observed interacting with compromised device tied to Cyberoam proxy network

173.220.106.166

UTA0178 IP address observed interacting with compromised device tied to Cyberoam proxy network