ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 144.31.215.205:443.

Database Entry


IOC ID:1799772
IOC: 144.31.215.205:443
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Unknown malware
Confidence Level : Confidence level is high (85%)
Is compromised? : False
ASN:AS198550 nodehost-as
Country:- RU
First seen:2026-04-25 14:40:36 UTC
Last seen:never
UUID:534d213a-402d-11f1-8759-42010aa4000a
Reporter Lenny_3BO
Reward 5 credits from ThreatFox
Tags:ClickFix FastAPI Python-embed RAT rmm zm_agent
Reference: https://github.com/Lenny-3BO/threat-intel/tree/main/clickfix/zenmetrics-luxespa-clickfix

Avatar
Lenny_3BO
zenmetrics ClickFix commercial-RMM agent (zm_agent). FastAPI+React C2 panel, tenant model --org/--key/--group, PS/JScript exec, SOCKS5 proxy, 30fps WS screen stream, Telegram exfil.