ThreatFox IOC Database

You are viewing the ThreatFox database entry for ip:port 80.76.49.99:8040.

Database Entry

Add tag Delete this IOC  Report False Positive Export IOC (JSON)    Export IOC (CSV)
IOC ID:1851392
IOC: 80.76.49.99:8040
IOC Type :ip:port
Threat Type :botnet_cc
Malware: Unknown malware
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS399486 VIRTUO
Country:- CA
First seen:2026-07-16 04:25:04 UTC
Last seen:never
UUID:93b9f602-80c4-11f1-97fa-42010aa4000a
Reporter Anonymous
Reward 5 credits from ThreatFox
Tags:evilconwi Live rogue-rmm ScreenConnect
Reference: https://github.com/yankywilson/shinysp1d3r-intel

Avatar
Anonymous
Rogue ScreenConnect/MeshCentral operator estate. Likely EvilConwi ecosystem (moderate confidence). SLSH attribution roughly even chance (low confidence) - NOT forensically joined to ShinySp1d3r. Detail: https://github.com/yankywilson/shinysp1d3r-intel