ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 85.208.84.22:2288.

Database Entry


IOC ID:1566008
IOC: 85.208.84.22:2288
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Remcos
Malware alias:RemcosRAT, Remvio, Socmer
Confidence Level : Confidence level is high (100%)
ASN:AS211659 STIMUL-AS
First seen:2025-08-08 04:01:16 UTC
Last seen:2025-09-19 19:48:23 UTC
UUID:54d2e213-740c-11f0-851c-42010aa4000a
Reporter DonPasci
Reward 5 credits from ThreatFox
Tags:AS211659 c2 censys RAT remcos STIMUL-AS
Reference: https://search.censys.io/hosts/85.208.84.22

Malware Samples


The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).

Time stamp (UTC)SHA256 hashBazaar
2025-08-17 14:55:27 f2e7ee35b011435008e0f8c57989888c69a361238e7e25e0681dc652555355b3