ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 158.94.210.189:444.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1652002
IOC: 158.94.210.189:444
IOC Type :ip:port
Threat Type :botnet_cc
Malware: LOBSHOT
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS214943 RAILNET
Country:- US
First seen:2025-11-28 07:12:09 UTC
Last seen:never
UUID:8dc27188-cc29-11f0-a341-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:LOBSHOT
Reference: https://bazaar.abuse.ch/sample/519fa983292aadb39249c783c9fa5a5650786977418589c47f601e48242166ff/