ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 147.45.78.168:80.

Database Entry


IOC ID:1270984
IOC: 147.45.78.168:80
IOC Type :ip:port
Threat Type :botnet_cc
Malware: FAKEUPDATES
Malware alias:FakeUpdate, GhoLoader, SocGholish
Confidence Level : Confidence level is moderate (50%)
ASN:AS210644 AEZA-AS
Country:- RU
First seen:2024-05-14 18:50:59 UTC
Last seen:never
UUID:e7bb0130-1222-11ef-a571-42010aa4000a
Reporter drb_ra
Reward 5 credits from ThreatFox
Tags:AEZA-AS SocGholish
Reference: https://search.censys.io/hosts/147.45.78.168

Avatar
drb_ra
SocGholish Found
C2: 147[.]45[.]78[.]168:80
Country: United States
ASN: AEZA-AS