ThreatFox IOC Database
You are viewing the ThreatFox database entry for ip:port 178.16.55.254:2079.
Database Entry
| IOC ID: | 1625298 |
|---|---|
| IOC: | 178.16.55.254:2079 |
| IOC Type : | ip:port |
| Threat Type : | botnet_cc |
| Malware: | Nanocore RAT |
| Malware alias: | Nancrat, NanoCore |
| Confidence Level : | Confidence level is high (100%) |
| ASN: | AS214943 RAILNET |
| Country: | US |
| First seen: | 2025-10-23 04:55:02 UTC |
| Last seen: | 2025-11-07 12:55:40 UTC |
| UUID: | 6f7e0080-afcc-11f0-894e-42010aa4000a |
| Reporter | |
| Reward | 5 credits from ThreatFox |
| Tags: | NanoCore RAT |
Malware Samples
The table below documents recent malware samples observed that are associated with this indicator of compromise (IOC).
| Time stamp (UTC) | SHA256 hash | Bazaar |
|---|---|---|
| 2025-10-23 05:00:09 | 1ea022e39cb9cf37fbfdc1f6b2b4cd2dff64793c981312963894ecf2d34587a9 |
US