Overview 35 indicators
No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.
| domain | 18 | PARAGON-domain.txt |
| ipv4 | 17 | PARAGON.json |
Principal sources 5 reports
Ranked by how many of this actor's indicators each report brought in.
- 33citizenlab.ca/2025/03/a-first-look-at-paragons-prolif…
- 33search.censys.io/hosts/178.237.39.204
- 2x.com/blackorbird/status/1933368441433698638
- 2citizenlab.ca/2025/06/first-forensic-confirmation-of-…
- 2app.validin.com/detail?find=%2FO%3Dnetwork39managment%2…
Timeline 35 indicators
Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.
35 shown
No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.
-
citizenlab.ca/2025/03/a-first-look-at-paragons-prolif… · search.censys.io/hosts/178.237.39.204
domain ancient-thing.it domain external-astra.com domain external-cag.com domain external-cap.com domain external-drt.com domain external-muki.com domain external-shotgun3.com domain external-sht-prd-4.com domain external-sht.com domain forti.external-muki.com domain forti.external-shotgun3.com domain forti.external-sht-prd-4.com domain forti.external-sht.com domain forti.internal-stg.com domain forti.paraccess.com domain internal-abba.com domain internal-stg.com domain modern-money.org ipv4 178.237.39.204:443 ipv4 178.237.39.204:50801 ipv4 178.237.39.204:53392 ipv4 178.237.39.204:64823 ipv4 84.110.122.27:443 ipv4 84.110.47.82:4443 ipv4 84.110.47.83:443 ipv4 84.110.47.84:1443 ipv4 84.110.47.84:443 ipv4 84.110.47.84:4443 ipv4 84.110.47.85:1443 ipv4 84.110.47.85:4443 ipv4 84.110.47.86:2443 ipv4 84.110.47.86:4432 ipv4 84.110.47.86:4443 -
x.com/blackorbird/status/1933368441433698638 · citizenlab.ca/2025/06/first-forensic-confirmation-of-… · app.validin.com/detail?find=%2FO%3Dnetwork39managment%2…
194.71.130.218:443 46.183.184.91:443