ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 152.53.195.231:22.

Database Entry


IOC ID:1820261
IOC: 152.53.195.231:22
IOC Type :ip:port
Threat Type :payload_delivery
Malware: Unknown malware
Confidence Level : Confidence level is high (80%)
Is compromised? : False
ASN:AS214996 HFTCL-AS-AP
Country:- HK
First seen:2026-05-31 07:05:56 UTC
Last seen:never
UUID:a7301304-5cbe-11f1-b930-42010aa4000a
Reporter nullblue67
Reward 5 credits from ThreatFox
Tags:credential-theft mikrotik-recon reconnaissance ssh-bruteforce telegram-stealer
Reference: https://twitter.com/NullBlue67

Avatar
nullblue67
SSH brute then recon for TelegramDesktop/tdata, /dev/ttyGSM*, MikroTik D877F783D5D3EF8C credential file 2026-05-31. Telegram session+SIM modem+MikroTik stealer profile.