ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 78.188.105.159:21.

Database Entry


IOC ID:1027114
IOC: 78.188.105.159:21
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Emotet
Malware alias:Geodo, Heodo
Confidence Level : Confidence level is elevated (75%)
ASN:AS9121 TTNet
Country:- TR
First seen:2022-11-30 06:15:16 UTC
Last seen:2022-11-30 07:30:01 UTC
UUID:5bdb72e4-7076-11ed-8c16-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:emotet
Reference: https://bazaar.abuse.ch/sample/09819925fdc296619617875dc4a026ed5657b455c0520c53729430e951e752f2/

Avatar
abuse_ch
emotet (aka Geodo,Heodo) botnet C2