ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 198.251.88.136:443.

Database Entry


IOC ID:1799773
IOC: 198.251.88.136:443
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Unknown malware
Confidence Level : Confidence level is high (80%)
Is compromised? : False
ASN:AS53667 PONYNET
Country:- CA
First seen:2026-04-25 14:40:37 UTC
Last seen:never
UUID:55e6c4b4-402d-11f1-8759-42010aa4000a
Reporter Lenny_3BO
Reward 5 credits from ThreatFox
Tags:ClickFix FastAPI Python-embed RAT rmm zm_agent
Reference: https://github.com/Lenny-3BO/threat-intel/tree/main/clickfix/zenmetrics-luxespa-clickfix

Avatar
Lenny_3BO
zenmetrics ClickFix commercial-RMM agent (zm_agent). FastAPI+React C2 panel, tenant model --org/--key/--group, PS/JScript exec, SOCKS5 proxy, 30fps WS screen stream, Telegram exfil.