ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 190.120.104.21:443.

Database Entry


IOC ID:1282232
IOC: 190.120.104.21:443
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Emotet
Malware alias:Geodo, Heodo
Confidence Level : Confidence level is elevated (75%)
ASN:AS28100 COOPERATIVA_DE_SERVICIOS_PUBLICOS_Y_SOCIALES_VILLA_DEL_ROSARIO_LTDA
Country:- AR
First seen:2024-06-06 01:30:20 UTC
Last seen:never
UUID:56602792-23a4-11ef-a11a-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:emotet
Reference: https://bazaar.abuse.ch/sample/47dba610a04ef1d7f18a795108cf9e62d2d6e9e22f0fba51143462f4d569a70d/

Avatar
abuse_ch
emotet (aka Geodo,Heodo) botnet C2