ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 192.227.128.157:1344.

Database Entry


IOC ID:1774443
IOC: 192.227.128.157:1344
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Remcos
Malware alias:RemcosRAT, Remvio, Socmer
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS36352 AS-COLOCROSSING
Country:- US
First seen:2026-03-23 16:13:16 UTC
Last seen:2026-03-23 19:00:08 UTC
UUID:333faea4-26d3-11f1-9af6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:remcos
Reference: https://bazaar.abuse.ch/sample/c900419b3bbe82ee2575baee02ae117465573706653cda154b8ccadaba663fad/

Avatar
abuse_ch
remcos (aka RemcosRAT,Remvio,Socmer) botnet C2