ThreatFox IOC Database

You are viewing the ThreatFox database entry for url http://45.61.187.50:50001/data.php.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1849782
IOC: http://45.61.187.50:50001/data.php
IOC Type :url
Threat Type :botnet_cc
Malware: Unknown malware
Confidence Level : Confidence level is elevated (75%)
Is compromised? : True
ASN:AS53667 PONYNET
Country:- CA
First seen:2026-07-13 16:42:06 UTC
Last seen:never
UUID:d600f45e-7ece-11f1-97fa-42010aa4000a
Reporter noloveforabuse
Reward 5 credits from ThreatFox
Tags:credential-stealer CVE-2026-10795 EXFILTRATION UpdraftPlus WordPress

Avatar
noloveforabuse
WordPress credential-stealer C2. Malicious mu-plugin POSTs cleartext logins to http://45.61.187.50:50001/data.php. Entry vector CVE-2026-10795 (UpdraftPlus). Observed active from ~2026-06-23.