ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 45.61.187.50:50001.

Database Entry


IOC ID:1849781
IOC: 45.61.187.50:50001
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Unknown malware
Confidence Level : Confidence level is elevated (75%)
Is compromised? : True
ASN:AS53667 PONYNET
Country:- CA
First seen:2026-07-13 16:42:07 UTC
Last seen:never
UUID:95a80310-7ece-11f1-97fa-42010aa4000a
Reporter noloveforabuse
Reward 5 credits from ThreatFox

Avatar
noloveforabuse
WordPress credential-stealer C2. Malicious mu-plugin POSTs cleartext logins to http://45.61.187.50:50001/data.php. Entry vector CVE-2026-10795 (UpdraftPlus). Observed active from ~2026-06-23.