ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 172.245.246.80:9090.

Database Entry

IOC ID:	1618576
IOC:	172.245.246.80:9090
IOC Type :	ip:port
Threat Type :	botnet_cc
Malware:	Remcos
Malware alias:	RemcosRAT, Remvio, Socmer
Confidence Level :	Confidence level is high (100%)
Is compromised? :	False
ASN:	AS36352 AS-COLOCROSSING
Country:	US
First seen:	2025-10-20 20:02:18 UTC
Last seen:	2025-12-24 17:47:45 UTC
UUID:	ae70dc9e-adef-11f0-894e-42010aa4000a
Reporter	DonPasci
Reward	5 credits from ThreatFox
Tags:	AS-COLOCROSSING AS36352 c2 censys RAT remcos
Reference:	https://search.censys.io/hosts/172.245.246.80

Malware Samples

The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).