Case Management

JP — Country

CASE-20260906-3AA6 MEDIUM OPEN Assignee: unassigned · Opened 12h ago

Opened from country JP

Entities

87
linked to case

IoCs

83
indicators

Entity types

3
dimensions

Evidence events

3
chain of custody

➕ Add anything to this case

Attach any entity — region, country, APT, source, MITRE technique, IoC, nation-state, campaign, data point, mission domain, CVE, malware, ransomware — and all linked entities are pulled in automatically.

🔎 IoC (83)

IndicatorRoleSource
13.230.157.153indicatorpivotsearch · workbench
13.193.178.97indicatorpivotsearch · workbench
153.135.4.238indicatorpivotsearch · workbench
202.226.39.161indicatorpivotsearch · workbench
217.60.123.75indicatorpivotsearch · workbench
217.60.122.104indicatorpivotsearch · workbench
212.107.30.201indicatorpivotsearch · workbench
212.87.194.10indicatorpivotsearch · workbench
153.205.12.134indicatorpivotsearch · workbench
139.180.198.56indicatorpivotsearch · workbench
52.101.124.117indicatorpivotsearch · workbench
143.90.14.10indicatorpivotsearch · workbench
212.102.51.49indicatorpivotsearch · workbench
45.14.71.13indicatorpivotsearch · workbench
212.102.51.4indicatorpivotsearch · workbench
2001:df6:7280::92:205indicatorpivotsearch · workbench
2001:df6:7280::92:202indicatorpivotsearch · workbench
3.113.1.222indicatorpivotsearch · workbench
3.112.178.56indicatorpivotsearch · workbench
3.112.74.224indicatorpivotsearch · workbench
1.0.26.229indicatorpivotsearch · workbench
1.0.23.110indicatorpivotsearch · workbench
1.0.20.14indicatorpivotsearch · workbench
217.60.123.193indicatorpivotsearch · workbench
5.8.71.148indicatorpivotsearch · workbench
118.27.79.157indicatorpivotsearch · workbench
220.218.70.141indicatorpivotsearch · workbench
218.221.211.115indicatorpivotsearch · workbench
139.180.198.17indicatorpivotsearch · workbench
157.7.188.177indicatorpivotsearch · workbench
143.90.14.67indicatorpivotsearch · workbench
45.77.15.71indicatorpivotsearch · workbench
45.77.12.14indicatorpivotsearch · workbench
45.76.221.207indicatorpivotsearch · workbench
45.76.213.110indicatorpivotsearch · workbench
191.223.220.23indicatorpivotsearch · workbench
222.230.75.248indicatorpivotsearch · workbench
219.117.196.250indicatorpivotsearch · workbench
210.172.183.32indicatorpivotsearch · workbench
126.147.245.193indicatorpivotsearch · workbench
58.91.175.121indicatorpivotsearch · workbench
188.95.67.218indicatorpivotsearch · workbench
54.65.161.223indicatorpivotsearch · workbench
212.102.51.106indicatorpivotsearch · workbench
212.102.51.75indicatorpivotsearch · workbench
212.102.51.74indicatorpivotsearch · workbench
212.102.51.38indicatorpivotsearch · workbench
212.102.51.24indicatorpivotsearch · workbench
217.60.123.92indicatorpivotsearch · workbench
103.163.220.206indicatorpivotsearch · workbench
103.163.220.55indicatorpivotsearch · workbench
212.102.51.113indicatorpivotsearch · workbench
208.52.181.117indicatorpivotsearch · workbench
52.194.162.60indicatorpivotsearch · workbench
1.0.104.87indicatorpivotsearch · workbench
212.102.51.62indicatorpivotsearch · workbench
103.163.220.247indicatorpivotsearch · workbench
103.163.220.242indicatorpivotsearch · workbench
103.163.220.241indicatorpivotsearch · workbench
103.163.220.239indicatorpivotsearch · workbench
103.163.220.231indicatorpivotsearch · workbench
103.163.220.178indicatorpivotsearch · workbench
103.163.220.174indicatorpivotsearch · workbench
103.163.220.167indicatorpivotsearch · workbench
103.163.220.159indicatorpivotsearch · workbench
103.163.220.155indicatorpivotsearch · workbench
103.163.220.153indicatorpivotsearch · workbench
103.163.220.151indicatorpivotsearch · workbench
103.163.220.142indicatorpivotsearch · workbench
103.163.220.139indicatorpivotsearch · workbench
103.163.220.137indicatorpivotsearch · workbench
103.163.220.132indicatorpivotsearch · workbench
103.163.220.63indicatorpivotsearch · workbench
103.163.220.44indicatorpivotsearch · workbench
103.163.220.31indicatorpivotsearch · workbench
103.163.220.26indicatorpivotsearch · workbench
103.163.220.19indicatorpivotsearch · workbench
103.163.220.16indicatorpivotsearch · workbench
103.163.220.5indicatorpivotsearch · workbench
103.2.5.223indicatorpivotsearch · workbench
34.153.223.34indicatorpivotsearch · workbench
13.230.116.240indicatorpivotsearch · workbench
34.97.36.46indicatorpivotsearch · workbench

🔒 Ransomware (3)

thegentlemenqilinlockbit5

🌎 Country (1)

JP

📜 Chain of Evidence (tamper-evident, hash-chained)

WhenActorActionEntitySourceHash
2026-09-06 18:01:40analystexpandcountry: JPgraph+live · 86 linked entities pulle6aca97b151
2026-09-06 18:01:33analystaddcountry: JPmanual · primarye8f568cc6e
2026-09-06 18:01:33analystopencountry: JPanalyst · case createddb192cf947

Each record's hash chains to the previous, so any tampering is detectable. Export the full trail via the Evidence report.

📝 Case Notes (0)

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

🔍 Lookup & Enrich

💡 Recommendations

⚙ Automation

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

🔗 Related Tools