ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 154.246.28.120:22.

Database Entry


IOC ID:1531762
IOC: 154.246.28.120:22
IOC Type :ip:port
Threat Type :botnet_cc
Malware: QakBot
Malware alias:Oakboat, Pinkslipbot, Qbot, Quakbot
Confidence Level : Confidence level is elevated (75%)
ASN:AS36947 ALGTEL-AS
Country:- DZ
First seen:2025-05-21 20:46:31 UTC
Last seen:2025-06-23 07:45:53 UTC
UUID:ad42517e-3684-11f0-90ee-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:drb-ra QakBot qbot Quakbot

Avatar
abuse_ch
Possible win.qakbot botnet C2 server