ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 109.190.249.106:80.

Database Entry


IOC ID:1313808
IOC: 109.190.249.106:80
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Emotet
Malware alias:Geodo, Heodo
Confidence Level : Confidence level is elevated (75%)
ASN:AS35540 OVH-TELECOM
Country:- FR
First seen:2024-08-20 14:15:25 UTC
Last seen:never
UUID:a511f402-5efe-11ef-ac38-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:emotet
Reference: https://bazaar.abuse.ch/sample/b7005c7ccbd24be171a4e29f5c04823dc72aa31c2881332b4bb7bc1eea603601/

Avatar
abuse_ch
emotet (aka Geodo,Heodo) botnet C2