ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 38.135.54.24:443.

Database Entry


IOC ID:1738920
IOC: 38.135.54.24:443
IOC Type :ip:port
Threat Type :botnet_cc
Malware: RansomHub
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS26383 ASNET
Country:- RU
First seen:2026-01-30 02:54:38 UTC
Last seen:2026-03-30 17:54:54 UTC
UUID:04454b29-fd87-11f0-b7d0-42010aa4000a
Reporter abuse_ch
Reward 10 credits from scusi
Tags:drb-ra RansomHub

Avatar
abuse_ch
Possible win.ransomhub botnet C2 server